<?xml version="1.0" encoding="UTF-8"?>
	<oval_definitions
		xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd"
		xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
		xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
		xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5"
		xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
	  <generator>
	      <oval:product_name>Marcus Updateinfo to OVAL Converter</oval:product_name>
	      <oval:schema_version>5.5</oval:schema_version>
	      <oval:timestamp>2023-10-19T04:50:22</oval:timestamp>
	  </generator>
<definitions>
<definition id="oval:org.opensuse.security:def:19990077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-1999-0077</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-1999-0077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0077" source="CVE"/>
    <reference ref_id="SUSE CVE-1999-0077" ref_url="https://www.suse.com/security/cve/CVE-1999-0077" source="SUSE CVE"/>
    <description>
    Predictable TCP sequence numbers allow spoofing.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-17"/>
	<updated date="2023-01-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-1999-0077/">CVE-1999-0077</cve>
	<bugzilla href="https://bugzilla.suse.com/954946">SUSE bug 954946</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:19990195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-1999-0195</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-1999-0195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0195" source="CVE"/>
    <reference ref_id="SUSE CVE-1999-0195" ref_url="https://www.suse.com/security/cve/CVE-1999-0195" source="SUSE CVE"/>
    <description>
    Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-17"/>
	<updated date="2023-01-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-1999-0195/">CVE-1999-0195</cve>
	<bugzilla href="https://bugzilla.suse.com/914171">SUSE bug 914171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009732558" comment="rpcbind is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:19990517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-1999-0517</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-1999-0517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0517" source="CVE"/>
    <reference ref_id="SUSE CVE-1999-0517" ref_url="https://www.suse.com/security/cve/CVE-1999-0517" source="SUSE CVE"/>
    <description>
    An SNMP community name is the default (e.g. public), null, or missing.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-1999-0517/">CVE-1999-0517</cve>
	<bugzilla href="https://bugzilla.suse.com/1207850">SUSE bug 1207850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334320" comment="net-snmp is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337615" comment="net-snmp-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009339027" comment="libsnmp30 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339028" comment="libsnmp30-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334320" comment="net-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337611" comment="perl-SNMP is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337612" comment="snmp-mibs is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:19990524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-1999-0524</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-1999-0524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0524" source="CVE"/>
    <reference ref_id="SUSE CVE-1999-0524" ref_url="https://www.suse.com/security/cve/CVE-1999-0524" source="SUSE CVE"/>
    <description>
    ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-06"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-1999-0524/">CVE-1999-0524</cve>
	<bugzilla href="https://bugzilla.suse.com/351997">SUSE bug 351997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20001254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2000-1254</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2000-1254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1254" source="CVE"/>
    <reference ref_id="SUSE CVE-2000-1254" ref_url="https://www.suse.com/security/cve/CVE-2000-1254" source="SUSE CVE"/>
    <description>
    crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2000-1254/">CVE-2000-1254</cve>
	<bugzilla href="https://bugzilla.suse.com/978847">SUSE bug 978847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333943" comment="openssl-1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333944" comment="openssl-1_1 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334861" comment="libopenssl0_9_8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333943" comment="openssl-1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333944" comment="openssl-1_1 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334861" comment="libopenssl0_9_8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334860" comment="libopenssl0_9_8-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334861" comment="libopenssl0_9_8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334865" comment="libopenssl-1_0_0-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333943" comment="openssl-1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334871" comment="openssl-1_0_0-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334866" comment="libopenssl1_1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334867" comment="libopenssl1_1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009343863" comment="libopenssl1_1-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009343864" comment="libopenssl1_1-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333944" comment="openssl-1_1 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334861" comment="libopenssl0_9_8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334865" comment="libopenssl-1_0_0-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333943" comment="openssl-1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334871" comment="openssl-1_0_0-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334866" comment="libopenssl1_1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334867" comment="libopenssl1_1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009343863" comment="libopenssl1_1-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009343864" comment="libopenssl1_1-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333944" comment="openssl-1_1 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334872" comment="libopenssl-1_1-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334873" comment="libopenssl-1_1-devel-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20010405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2001-0405</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2001-0405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0405" source="CVE"/>
    <reference ref_id="SUSE CVE-2001-0405" ref_url="https://www.suse.com/security/cve/CVE-2001-0405" source="SUSE CVE"/>
    <description>
    ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2001-0405/">CVE-2001-0405</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20010851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2001-0851</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2001-0851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0851" source="CVE"/>
    <reference ref_id="SUSE CVE-2001-0851" ref_url="https://www.suse.com/security/cve/CVE-2001-0851" source="SUSE CVE"/>
    <description>
    Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2001-0851/">CVE-2001-0851</cve>
	<bugzilla href="https://bugzilla.suse.com/1175687">SUSE bug 1175687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20020392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2002-0392</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2002-0392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0392" source="CVE"/>
    <reference ref_id="SUSE CVE-2002-0392" ref_url="https://www.suse.com/security/cve/CVE-2002-0392" source="SUSE CVE"/>
    <description>
    Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2002-0392/">CVE-2002-0392</cve>
	<bugzilla href="https://bugzilla.suse.com/998145">SUSE bug 998145</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335136" comment="apache2-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333965" comment="apache2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335131" comment="apache2-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335132" comment="apache2-example-pages is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335133" comment="apache2-prefork is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335134" comment="apache2-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335135" comment="apache2-worker is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:200220001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2002-20001</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2002-20001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-20001" source="CVE"/>
    <reference ref_id="SUSE CVE-2002-20001" ref_url="https://www.suse.com/security/cve/CVE-2002-20001" source="SUSE CVE"/>
		<reference ref_id="TID000020510" ref_url="https://www.suse.com/support/kb/doc/?id=000020510" source="SUSE-SU"/>
    <description>
    The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2002-20001/">CVE-2002-20001</cve>
	<bugzilla href="https://bugzilla.suse.com/1192815">SUSE bug 1192815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199367">SUSE bug 1199367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20022443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2002-2443</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2002-2443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2443" source="CVE"/>
    <reference ref_id="SUSE CVE-2002-2443" ref_url="https://www.suse.com/security/cve/CVE-2002-2443" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000528.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1119-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1122-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00007.html" source="SUSE-SU"/>
    <description>
    schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2002-2443/">CVE-2002-2443</cve>
	<bugzilla href="https://bugzilla.suse.com/825985">SUSE bug 825985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871411">SUSE bug 871411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/887734">SUSE bug 887734</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20030028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2003-0028</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2003-0028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0028" source="CVE"/>
    <reference ref_id="SUSE CVE-2003-0028" ref_url="https://www.suse.com/security/cve/CVE-2003-0028" source="SUSE CVE"/>
		<reference ref_id="SuSE-SA:2003:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2003-05/msg00003.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-13"/>
	<updated date="2023-07-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2003-0028/">CVE-2003-0028</cve>
	<bugzilla href="https://bugzilla.suse.com/816627">SUSE bug 816627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334360" comment="libtirpc is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659672" comment="libtirpc-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337765" comment="libtirpc-netconfig is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337766" comment="libtirpc3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337767" comment="libtirpc3-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20030252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2003-0252</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2003-0252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0252" source="CVE"/>
    <reference ref_id="SUSE CVE-2003-0252" ref_url="https://www.suse.com/security/cve/CVE-2003-0252" source="SUSE CVE"/>
		<reference ref_id="SuSE-SA:2003:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2003-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2003-0252/">CVE-2003-0252</cve>
	<bugzilla href="https://bugzilla.suse.com/42744">SUSE bug 42744</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/42918">SUSE bug 42918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009667778" comment="nfs-utils is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009667767" comment="nfs-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009667768" comment="nfs-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009667769" comment="nfs-kernel-server is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20031332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2003-1332</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP5</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2003-1332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1332" source="CVE"/>
    <reference ref_id="SUSE CVE-2003-1332" ref_url="https://www.suse.com/security/cve/CVE-2003-1332" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the reply_nttrans function in Samba 2.2.7a and earlier allows remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2003-0201.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2003-1332/">CVE-2003-1332</cve>
	<bugzilla href="https://bugzilla.suse.com/1184864">SUSE bug 1184864</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159727" comment="SUSE Linux Enterprise High Availability Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240272" comment="SUSE Linux Enterprise High Availability Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009273143" comment="SUSE Linux Enterprise High Availability Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336017" comment="ctdb is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334846" comment="libsamba-errors0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335571" comment="libsamba-errors0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334965" comment="libsmbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334853" comment="libsmbldap0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334967" comment="libsmbldap0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334979" comment="libdcerpc-atsvc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334846" comment="libsamba-errors0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335571" comment="libsamba-errors0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334965" comment="libsmbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334853" comment="libsmbldap0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334967" comment="libsmbldap0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341005" comment="libsamba-policy-python3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341006" comment="libsamba-policy0-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664706" comment="libsamba-policy0-python3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664360" comment="samba-client-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664361" comment="samba-client-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337106" comment="samba-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654606" comment="samba-ldb-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338828" comment="samba-libs-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338829" comment="samba-libs-python3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341011" comment="samba-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664363" comment="samba-tool is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664364" comment="samba-winbind-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664365" comment="samba-winbind-libs-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20031605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2003-1605</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2003-1605" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1605" source="CVE"/>
    <reference ref_id="SUSE CVE-2003-1605" ref_url="https://www.suse.com/security/cve/CVE-2003-1605" source="SUSE CVE"/>
    <description>
    curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2003-1605/">CVE-2003-1605</cve>
	<bugzilla href="https://bugzilla.suse.com/1105868">SUSE bug 1105868</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335174" comment="libcurl-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333977" comment="curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335173" comment="libcurl4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335172" comment="libcurl4-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20040230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-0230</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-0230" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0230" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-0230" ref_url="https://www.suse.com/security/cve/CVE-2004-0230" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
    <description>
    TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2004-0230/">CVE-2004-0230</cve>
	<bugzilla href="https://bugzilla.suse.com/1184394">SUSE bug 1184394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198501">SUSE bug 1198501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206598">SUSE bug 1206598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969340">SUSE bug 969340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989152">SUSE bug 989152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20040657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-0657</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-0657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0657" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-0657" ref_url="https://www.suse.com/security/cve/CVE-2004-0657" source="SUSE CVE"/>
    <description>
    Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2004-0657/">CVE-2004-0657</cve>
	<bugzilla href="https://bugzilla.suse.com/1173323">SUSE bug 1173323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338821" comment="ntp is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338821" comment="ntp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338822" comment="ntp-doc is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20040790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-0790</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-0790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0790" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-0790" ref_url="https://www.suse.com/security/cve/CVE-2004-0790" source="SUSE CVE"/>
    <description>
    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2004-0790/">CVE-2004-0790</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20040791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-0791</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-0791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0791" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-0791" ref_url="https://www.suse.com/security/cve/CVE-2004-0791" source="SUSE CVE"/>
    <description>
    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2004-0791/">CVE-2004-0791</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20040801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-0801</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-0801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0801" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-0801" ref_url="https://www.suse.com/security/cve/CVE-2004-0801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2004:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2004-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2006:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0950-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00036.html" source="SUSE-SU"/>
    <description>
    Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2004-0801/">CVE-2004-0801</cve>
	<bugzilla href="https://bugzilla.suse.com/59233">SUSE bug 59233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698451">SUSE bug 698451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/704608">SUSE bug 704608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/852368">SUSE bug 852368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957531">SUSE bug 957531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144779" comment="hplip-devel-3.14.6-3.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145041" comment="hplip-devel-3.14.6-3.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159763" comment="hplip-devel-3.16.11-1.33 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140679" comment="hplip-3.14.6-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140680" comment="hplip-hpijs-3.14.6-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140681" comment="hplip-sane-3.14.6-3.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141414" comment="hplip-3.14.6-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141415" comment="hplip-hpijs-3.14.6-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141416" comment="hplip-sane-3.14.6-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159029" comment="hplip-3.16.11-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159030" comment="hplip-hpijs-3.16.11-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159031" comment="hplip-sane-3.16.11-1.33 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20041060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-1060</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-1060" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1060" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-1060" ref_url="https://www.suse.com/security/cve/CVE-2004-1060" source="SUSE CVE"/>
    <description>
    Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2004-1060/">CVE-2004-1060</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20042771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-2771</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-2771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2771" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-2771" ref_url="https://www.suse.com/security/cve/CVE-2004-2771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001116.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1713-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00097.html" source="SUSE-SU"/>
    <description>
    The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2004-2771/">CVE-2004-2771</cve>
	<bugzilla href="https://bugzilla.suse.com/909208">SUSE bug 909208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141041" comment="mailx-12.5-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142038" comment="mailx-12.5-25.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514381" comment="mailx-12.5-22.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543303" comment="mailx-12.5-22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20042779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-2779</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2004-2779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2779" source="CVE"/>
    <reference ref_id="SUSE CVE-2004-2779" ref_url="https://www.suse.com/security/cve/CVE-2004-2779" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003823.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0735-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00067.html" source="SUSE-SU"/>
    <description>
    id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2004-2779/">CVE-2004-2779</cve>
	<bugzilla href="https://bugzilla.suse.com/1081959">SUSE bug 1081959</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173108" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009519025" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792101" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173167" comment="libid3tag-devel-0.15.1b-184.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173108" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009541393" comment="libid3tag-devel-0.15.1b-184.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541394" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792100" comment="libid3tag-devel-0.15.1b-184.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792101" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0065</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0065" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0065" ref_url="https://www.suse.com/security/cve/CVE-2005-0065" source="SUSE CVE"/>
    <description>
    The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka "TCP sequence number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2005-0065/">CVE-2005-0065</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0066</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0066" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0066" ref_url="https://www.suse.com/security/cve/CVE-2005-0066" source="SUSE CVE"/>
    <description>
    The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka "TCP acknowledgement number checking"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2005-0066/">CVE-2005-0066</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0067</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0067" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0067" ref_url="https://www.suse.com/security/cve/CVE-2005-0067" source="SUSE CVE"/>
    <description>
    The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2005-0067/">CVE-2005-0067</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0068</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0068" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0068" ref_url="https://www.suse.com/security/cve/CVE-2005-0068" source="SUSE CVE"/>
    <description>
    The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2005-0068/">CVE-2005-0068</cve>
	<bugzilla href="https://bugzilla.suse.com/1173637">SUSE bug 1173637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173639">SUSE bug 1173639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173640">SUSE bug 1173640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173642">SUSE bug 1173642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173643">SUSE bug 1173643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173644">SUSE bug 1173644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173645">SUSE bug 1173645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0210</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0210" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0210" ref_url="https://www.suse.com/security/cve/CVE-2005-0210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-03/msg00020.html" source="SUSE-SU"/>
    <description>
    Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-0210/">CVE-2005-0210</cve>
	<bugzilla href="https://bugzilla.suse.com/65594">SUSE bug 65594</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0400</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0400" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0400" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0400" ref_url="https://www.suse.com/security/cve/CVE-2005-0400" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-06/msg00015.html" source="SUSE-SU"/>
    <description>
    The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2005-0400/">CVE-2005-0400</cve>
	<bugzilla href="https://bugzilla.suse.com/75706">SUSE bug 75706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20050749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-0749</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-0749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0749" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-0749" ref_url="https://www.suse.com/security/cve/CVE-2005-0749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-06/msg00015.html" source="SUSE-SU"/>
    <description>
    The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-0749/">CVE-2005-0749</cve>
	<bugzilla href="https://bugzilla.suse.com/73837">SUSE bug 73837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1080</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1080" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1080" ref_url="https://www.suse.com/security/cve/CVE-2005-1080" source="SUSE CVE"/>
    <description>
    Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-1080/">CVE-2005-1080</cve>
	<bugzilla href="https://bugzilla.suse.com/191845">SUSE bug 191845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607043">SUSE bug 607043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607762">SUSE bug 607762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/818591">SUSE bug 818591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334103" comment="java-1_7_1-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336013" comment="java-1_7_1-ibm-alsa is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336388" comment="java-1_7_1-ibm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336012" comment="java-1_7_1-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336014" comment="java-1_7_1-ibm-plugin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334104" comment="java-1_8_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336015" comment="java-1_8_0-ibm-alsa is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336389" comment="java-1_8_0-ibm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336016" comment="java-1_8_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334103" comment="java-1_7_1-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336013" comment="java-1_7_1-ibm-alsa is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336388" comment="java-1_7_1-ibm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336012" comment="java-1_7_1-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336014" comment="java-1_7_1-ibm-plugin is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1264</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1264" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1264" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1264" ref_url="https://www.suse.com/security/cve/CVE-2005-1264" source="SUSE CVE"/>
    <description>
    Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-1264/">CVE-2005-1264</cve>
	<bugzilla href="https://bugzilla.suse.com/84043">SUSE bug 84043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1265</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1265" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1265" ref_url="https://www.suse.com/security/cve/CVE-2005-1265" source="SUSE CVE"/>
    <description>
    The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-1265/">CVE-2005-1265</cve>
	<bugzilla href="https://bugzilla.suse.com/84728">SUSE bug 84728</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1763</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1763" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1763" ref_url="https://www.suse.com/security/cve/CVE-2005-1763" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-06/msg00015.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-1763/">CVE-2005-1763</cve>
	<bugzilla href="https://bugzilla.suse.com/84078">SUSE bug 84078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1767" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1767" ref_url="https://www.suse.com/security/cve/CVE-2005-1767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-08/msg00008.html" source="SUSE-SU"/>
    <description>
    traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2005-1767/">CVE-2005-1767</cve>
	<bugzilla href="https://bugzilla.suse.com/88492">SUSE bug 88492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/90500">SUSE bug 90500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20051918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-1918</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-1918" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1918" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-1918" ref_url="https://www.suse.com/security/cve/CVE-2005-1918" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-21"/>
	<updated date="2023-01-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-1918/">CVE-2005-1918</cve>
	<bugzilla href="https://bugzilla.suse.com/145081">SUSE bug 145081</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009727666" comment="tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727667" comment="tar-lang is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20052098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-2098</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-2098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2098" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-2098" ref_url="https://www.suse.com/security/cve/CVE-2005-2098" source="SUSE CVE"/>
    <description>
    The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-2098/">CVE-2005-2098</cve>
	<bugzilla href="https://bugzilla.suse.com/100506">SUSE bug 100506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20052458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-2458</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-2458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2458" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-2458" ref_url="https://www.suse.com/security/cve/CVE-2005-2458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2005:068" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00011.html" source="SUSE-SU"/>
    <description>
    inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with "improper tables".
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-2458/">CVE-2005-2458</cve>
	<bugzilla href="https://bugzilla.suse.com/100428">SUSE bug 100428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/102323">SUSE bug 102323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/104085">SUSE bug 104085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/114364">SUSE bug 114364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/117169">SUSE bug 117169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/130270">SUSE bug 130270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/132739">SUSE bug 132739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/133577">SUSE bug 133577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/133972">SUSE bug 133972</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20052490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-2490</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-2490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2490" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-2490" ref_url="https://www.suse.com/security/cve/CVE-2005-2490" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:068" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00011.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to execute arbitrary code by calling sendmsg and modifying the message contents in another thread.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-06-25"/>
	<updated date="2023-06-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-2490/">CVE-2005-2490</cve>
	<bugzilla href="https://bugzilla.suse.com/100428">SUSE bug 100428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/102323">SUSE bug 102323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/104085">SUSE bug 104085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/114364">SUSE bug 114364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/117169">SUSE bug 117169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/130270">SUSE bug 130270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/132739">SUSE bug 132739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/133577">SUSE bug 133577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/133972">SUSE bug 133972</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20052492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-2492</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-2492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2492" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-2492" ref_url="https://www.suse.com/security/cve/CVE-2005-2492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:068" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00011.html" source="SUSE-SU"/>
    <description>
    The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-06-26"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2005-2492/">CVE-2005-2492</cve>
	<bugzilla href="https://bugzilla.suse.com/114365">SUSE bug 114365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20052553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-2553</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-2553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2553" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-2553" ref_url="https://www.suse.com/security/cve/CVE-2005-2553" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-02/msg00021.html" source="SUSE-SU"/>
    <description>
    The find_target function in ptrace32.c in the Linux kernel 2.4.x before 2.4.29 does not properly handle a NULL return value from another function, which allows local users to cause a denial of service (kernel crash/oops) by running a 32-bit ltrace program with the -i option on a 64-bit executable program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2005-2553/">CVE-2005-2553</cve>
	<bugzilla href="https://bugzilla.suse.com/139565">SUSE bug 139565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20053353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-3353</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-3353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3353" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-3353" ref_url="https://www.suse.com/security/cve/CVE-2005-3353" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:069" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00012.html" source="SUSE-SU"/>
    <description>
    The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-3353/">CVE-2005-3353</cve>
	<bugzilla href="https://bugzilla.suse.com/118976">SUSE bug 118976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/120087">SUSE bug 120087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/130227">SUSE bug 130227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131578">SUSE bug 131578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131579">SUSE bug 131579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131580">SUSE bug 131580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/132684">SUSE bug 132684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/135480">SUSE bug 135480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/529198">SUSE bug 529198</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20053388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-3388</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-3388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3388" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-3388" ref_url="https://www.suse.com/security/cve/CVE-2005-3388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2005:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2005:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2005:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-11/msg00013.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-3388/">CVE-2005-3388</cve>
	<bugzilla href="https://bugzilla.suse.com/120087">SUSE bug 120087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131578">SUSE bug 131578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131579">SUSE bug 131579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131580">SUSE bug 131580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/132684">SUSE bug 132684</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20053389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-3389</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-3389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3389" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-3389" ref_url="https://www.suse.com/security/cve/CVE-2005-3389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:069" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2005:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2005:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2005:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-11/msg00013.html" source="SUSE-SU"/>
    <description>
    The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-3389/">CVE-2005-3389</cve>
	<bugzilla href="https://bugzilla.suse.com/118976">SUSE bug 118976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/120087">SUSE bug 120087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/130227">SUSE bug 130227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131578">SUSE bug 131578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131579">SUSE bug 131579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131580">SUSE bug 131580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/132684">SUSE bug 132684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/135480">SUSE bug 135480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/307272">SUSE bug 307272</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20053390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-3390</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-3390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3390" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-3390" ref_url="https://www.suse.com/security/cve/CVE-2005-3390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:069" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2005:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2005:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2005:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-11/msg00013.html" source="SUSE-SU"/>
    <description>
    The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-3390/">CVE-2005-3390</cve>
	<bugzilla href="https://bugzilla.suse.com/118976">SUSE bug 118976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/120087">SUSE bug 120087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/130227">SUSE bug 130227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131578">SUSE bug 131578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131579">SUSE bug 131579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/131580">SUSE bug 131580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/132684">SUSE bug 132684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/135480">SUSE bug 135480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20053391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-3391</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-3391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3391" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-3391" ref_url="https://www.suse.com/security/cve/CVE-2005-3391" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:069" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00012.html" source="SUSE-SU"/>
    <description>
    Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-3391/">CVE-2005-3391</cve>
	<bugzilla href="https://bugzilla.suse.com/131580">SUSE bug 131580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/135673">SUSE bug 135673</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20053392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-3392</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-3392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3392" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-3392" ref_url="https://www.suse.com/security/cve/CVE-2005-3392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2005:069" ref_url="https://lists.opensuse.org/opensuse-security-announce/2005-12/msg00012.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-3392/">CVE-2005-3392</cve>
	<bugzilla href="https://bugzilla.suse.com/131580">SUSE bug 131580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/135673">SUSE bug 135673</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20053590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-3590</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-3590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3590" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-3590" ref_url="https://www.suse.com/security/cve/CVE-2005-3590" source="SUSE CVE"/>
    <description>
    The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2005-3590/">CVE-2005-3590</cve>
	<bugzilla href="https://bugzilla.suse.com/1132195">SUSE bug 1132195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334833" comment="glibc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334834" comment="glibc-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334835" comment="glibc-locale-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334833" comment="glibc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334834" comment="glibc-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334830" comment="glibc-html is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334835" comment="glibc-locale-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334832" comment="glibc-profile is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334836" comment="glibc-profile-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334837" comment="glibc-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20053623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-3623</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-3623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3623" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-3623" ref_url="https://www.suse.com/security/cve/CVE-2005-3623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2006:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-02/msg00021.html" source="SUSE-SU"/>
    <description>
    nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-3623/">CVE-2005-3623</cve>
	<bugzilla href="https://bugzilla.suse.com/139411">SUSE bug 139411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20054881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-4881</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-4881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4881" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-4881" ref_url="https://www.suse.com/security/cve/CVE-2005-4881" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
    <description>
    The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-04-05"/>
	<updated date="2023-04-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2005-4881/">CVE-2005-4881</cve>
	<bugzilla href="https://bugzilla.suse.com/536467">SUSE bug 536467</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20054886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-4886</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-4886" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4886" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-4886" ref_url="https://www.suse.com/security/cve/CVE-2005-4886" source="SUSE CVE"/>
    <description>
    The selinux_parse_skb_ipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denial of service (OOPS) via vectors associated with an incorrect call to the ipv6_skip_exthdr function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2005-4886/">CVE-2005-4886</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20054900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2005-4900</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2005-4900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4900" source="CVE"/>
    <reference ref_id="SUSE CVE-2005-4900" ref_url="https://www.suse.com/security/cve/CVE-2005-4900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0992-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006709.html" source="SUSE-SU"/>
    <description>
    SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2.  NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2005-4900/">CVE-2005-4900</cve>
	<bugzilla href="https://bugzilla.suse.com/1026646">SUSE bug 1026646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1026936">SUSE bug 1026936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042640">SUSE bug 1042640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150998">SUSE bug 1150998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334511" comment="git is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334511" comment="git is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335663" comment="git-core is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335664" comment="git-cvs is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335665" comment="git-daemon is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335666" comment="git-email is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335667" comment="git-gui is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335668" comment="git-svn is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335669" comment="git-web is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335670" comment="gitk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334511" comment="git is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335663" comment="git-core is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335664" comment="git-cvs is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335665" comment="git-daemon is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335672" comment="git-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335666" comment="git-email is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335667" comment="git-gui is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335668" comment="git-svn is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335669" comment="git-web is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335670" comment="gitk is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20060855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-0855</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-0855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0855" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-0855" ref_url="https://www.suse.com/security/cve/CVE-2006-0855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2006:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-03/msg00017.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-0855/">CVE-2006-0855</cve>
	<bugzilla href="https://bugzilla.suse.com/153057">SUSE bug 153057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512004" comment="zoo-2.10-1020.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513616" comment="zoo-2.10-1020.56 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20060996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-0996</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-0996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0996" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-0996" ref_url="https://www.suse.com/security/cve/CVE-2006-0996" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-05/msg00011.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-0996/">CVE-2006-0996</cve>
	<bugzilla href="https://bugzilla.suse.com/164804">SUSE bug 164804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/164845">SUSE bug 164845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20061017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-1017</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-1017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1017" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-1017" ref_url="https://www.suse.com/security/cve/CVE-2006-1017" source="SUSE CVE"/>
    <description>
    The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2006-1017/">CVE-2006-1017</cve>
	<bugzilla href="https://bugzilla.suse.com/154317">SUSE bug 154317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/279863">SUSE bug 279863</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20061206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-1206</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-1206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1206" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-1206" ref_url="https://www.suse.com/security/cve/CVE-2006-1206" source="SUSE CVE"/>
    <description>
    Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service (connection slot exhaustion) via a large number of connection attempts that exceeds the MAX_UNAUTH_CLIENTS defined value of 30.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-1206/">CVE-2006-1206</cve>
	<bugzilla href="https://bugzilla.suse.com/802639">SUSE bug 802639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841638">SUSE bug 841638</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20061490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-1490</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-1490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1490" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-1490" ref_url="https://www.suse.com/security/cve/CVE-2006-1490" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-05/msg00011.html" source="SUSE-SU"/>
    <description>
    PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a "binary safety" issue. NOTE: this issue has been referred to as a "memory leak," but it is an information leak that discloses memory contents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-1490/">CVE-2006-1490</cve>
	<bugzilla href="https://bugzilla.suse.com/161718">SUSE bug 161718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/164845">SUSE bug 164845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728467" comment="apache2-mod_php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728468" comment="php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728469" comment="php74-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728470" comment="php74-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728471" comment="php74-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728472" comment="php74-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728473" comment="php74-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728474" comment="php74-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728475" comment="php74-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728476" comment="php74-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728477" comment="php74-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728478" comment="php74-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728479" comment="php74-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728480" comment="php74-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728481" comment="php74-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728482" comment="php74-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728483" comment="php74-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728484" comment="php74-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728485" comment="php74-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728486" comment="php74-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728487" comment="php74-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728488" comment="php74-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728489" comment="php74-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728490" comment="php74-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728491" comment="php74-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728492" comment="php74-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728493" comment="php74-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728494" comment="php74-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728495" comment="php74-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728496" comment="php74-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728497" comment="php74-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728498" comment="php74-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728499" comment="php74-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728500" comment="php74-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728501" comment="php74-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728502" comment="php74-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728503" comment="php74-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728504" comment="php74-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728505" comment="php74-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728506" comment="php74-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728507" comment="php74-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728508" comment="php74-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728509" comment="php74-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728510" comment="php74-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728511" comment="php74-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728512" comment="php74-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728513" comment="php74-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728514" comment="php74-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728515" comment="php74-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728516" comment="php74-zlib is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20061494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-1494</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-1494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1494" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-1494" ref_url="https://www.suse.com/security/cve/CVE-2006-1494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-05/msg00011.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2006-1494/">CVE-2006-1494</cve>
	<bugzilla href="https://bugzilla.suse.com/164845">SUSE bug 164845</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20061991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-1991</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-1991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1991" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-1991" ref_url="https://www.suse.com/security/cve/CVE-2006-1991" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-1991/">CVE-2006-1991</cve>
	<bugzilla href="https://bugzilla.suse.com/169038">SUSE bug 169038</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:200620001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-20001</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-20001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-20001" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-20001" ref_url="https://www.suse.com/security/cve/CVE-2006-20001" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2023:330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013732.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013782.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013558.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0185-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013556.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013648.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013700.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0322-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-February/027580.html" source="SUSE-SU"/>
    <description>
    A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.

This issue affects Apache HTTP Server 2.4.54 and earlier.

    </description>
<advisory from="security@suse.de">
	<issued date="2023-01-19"/>
	<updated date="2023-09-12"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2006-20001/">CVE-2006-20001</cve>
	<bugzilla href="https://bugzilla.suse.com/1207247">SUSE bug 1207247</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3-ltss</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009735065" comment="apache2-devel-2.4.51-35.22.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009735066" comment="apache2-2.4.51-35.22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009735067" comment="apache2-doc-2.4.51-35.22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009735068" comment="apache2-example-pages-2.4.51-35.22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009735069" comment="apache2-prefork-2.4.51-35.22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009735070" comment="apache2-utils-2.4.51-35.22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009735071" comment="apache2-worker-2.4.51-35.22.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009736603" comment="apache2-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736604" comment="apache2-doc-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736605" comment="apache2-example-pages-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736606" comment="apache2-prefork-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736607" comment="apache2-utils-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736608" comment="apache2-worker-2.4.23-29.94.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009736632" comment="apache2-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736604" comment="apache2-doc-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736633" comment="apache2-example-pages-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736634" comment="apache2-prefork-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736635" comment="apache2-utils-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736636" comment="apache2-worker-2.4.23-29.94.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009736804" comment="apache2-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736604" comment="apache2-doc-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736805" comment="apache2-example-pages-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736806" comment="apache2-prefork-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736807" comment="apache2-utils-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736808" comment="apache2-worker-2.4.23-29.94.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009736826" comment="apache2-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736604" comment="apache2-doc-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736827" comment="apache2-example-pages-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736828" comment="apache2-prefork-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736829" comment="apache2-utils-2.4.23-29.94.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009736830" comment="apache2-worker-2.4.23-29.94.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20062607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-2607</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-2607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2607" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-2607" ref_url="https://www.suse.com/security/cve/CVE-2006-2607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-05/msg00017.html" source="SUSE-SU"/>
    <description>
    do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-2607/">CVE-2006-2607</cve>
	<bugzilla href="https://bugzilla.suse.com/178863">SUSE bug 178863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/537178">SUSE bug 537178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140508" comment="cron-4.2-58.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140509" comment="cronie-1.4.11-58.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141279" comment="cron-4.2-55.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141280" comment="cronie-1.4.11-55.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512773" comment="cron-4.2-59.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512774" comment="cronie-1.4.11-59.10.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20062937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-2937</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-2937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2937" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-2937" ref_url="https://www.suse.com/security/cve/CVE-2006-2937" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:058" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2006:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
    <description>
    OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-08"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-2937/">CVE-2006-2937</cve>
	<bugzilla href="https://bugzilla.suse.com/202366">SUSE bug 202366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/207635">SUSE bug 207635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/215623">SUSE bug 215623</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20063376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-3376</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-3376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3376" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-3376" ref_url="https://www.suse.com/security/cve/CVE-2006-3376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-08/msg00010.html" source="SUSE-SU"/>
    <description>
    Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-06-11"/>
	<updated date="2023-07-08"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-3376/">CVE-2006-3376</cve>
	<bugzilla href="https://bugzilla.suse.com/189924">SUSE bug 189924</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009768362" comment="libwmf-0_2-7 is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20063635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-3635</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-3635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3635" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-3635" ref_url="https://www.suse.com/security/cve/CVE-2006-3635" source="SUSE CVE"/>
    <description>
    The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) via a crafted application that leverages the mishandling of invalid Register Stack Engine (RSE) state.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-08"/>
	<updated date="2023-07-08"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-3635/">CVE-2006-3635</cve>
	<bugzilla href="https://bugzilla.suse.com/199440">SUSE bug 199440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/199441">SUSE bug 199441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20063738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-3738</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-3738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3738" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-3738" ref_url="https://www.suse.com/security/cve/CVE-2006-3738" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:058" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2006:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-10/msg00007.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2006-3738/">CVE-2006-3738</cve>
	<bugzilla href="https://bugzilla.suse.com/202366">SUSE bug 202366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/215623">SUSE bug 215623</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20064197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-4197</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-4197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4197" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-4197" ref_url="https://www.suse.com/security/cve/CVE-2006-4197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-4197/">CVE-2006-4197</cve>
	<bugzilla href="https://bugzilla.suse.com/199134">SUSE bug 199134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140886" comment="libmusicbrainz4-2.1.5-27.86 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144887" comment="libmusicbrainz-devel-2.1.5-27.86 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147572" comment="libmusicbrainz4-2.1.5-27.79 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20064484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-4484</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-4484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4484" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-4484" ref_url="https://www.suse.com/security/cve/CVE-2006-4484" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2006-4484/">CVE-2006-4484</cve>
	<bugzilla href="https://bugzilla.suse.com/200181">SUSE bug 200181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/355864">SUSE bug 355864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/356187">SUSE bug 356187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/357978">SUSE bug 357978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/372642">SUSE bug 372642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/374257">SUSE bug 374257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/386009">SUSE bug 386009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/709852">SUSE bug 709852</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141069" comment="perl-Tk-804.031-3.82 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144981" comment="perl-Tk-devel-804.031-3.82 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147606" comment="perl-Tk-804.031-3.76 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513353" comment="perl-Tk-804.031-5.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514237" comment="perl-Tk-devel-804.031-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20064623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-4623</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-4623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4623" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-4623" ref_url="https://www.suse.com/security/cve/CVE-2006-4623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:079" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-12/msg00018.html" source="SUSE-SU"/>
    <description>
    The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service (crash) via an SNDU length of 0 in a ULE packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-4623/">CVE-2006-4623</cve>
	<bugzilla href="https://bugzilla.suse.com/201429">SUSE bug 201429</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20064814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-4814</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-4814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4814" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-4814" ref_url="https://www.suse.com/security/cve/CVE-2006-4814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-02/msg00009.html" source="SUSE-SU"/>
    <description>
    The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-4814/">CVE-2006-4814</cve>
	<bugzilla href="https://bugzilla.suse.com/207667">SUSE bug 207667</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20064980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-4980</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-4980" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4980" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-4980" ref_url="https://www.suse.com/security/cve/CVE-2006-4980" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-10/msg00013.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-4980/">CVE-2006-4980</cve>
	<bugzilla href="https://bugzilla.suse.com/208223">SUSE bug 208223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336104" comment="python-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336100" comment="python-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336102" comment="python-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20065051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-5051</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-5051" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5051" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-5051" ref_url="https://www.suse.com/security/cve/CVE-2006-5051" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:062" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-10/msg00011.html" source="SUSE-SU"/>
    <description>
    Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2006-5051/">CVE-2006-5051</cve>
	<bugzilla href="https://bugzilla.suse.com/208662">SUSE bug 208662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/426510">SUSE bug 426510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545317">SUSE bug 545317</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20065701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-5701</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-5701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5701" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-5701" ref_url="https://www.suse.com/security/cve/CVE-2006-5701" source="SUSE CVE"/>
    <description>
    Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other distributions, allows local users to cause a denial of service by mounting a crafted squashfs filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-02"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-5701/">CVE-2006-5701</cve>
	<bugzilla href="https://bugzilla.suse.com/218162">SUSE bug 218162</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20065751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-5751</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-5751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5751" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-5751" ref_url="https://www.suse.com/security/cve/CVE-2006-5751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2006:079" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00009.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the get_fdb_entries function in net/bridge/br_ioctl.c in the Linux kernel before 2.6.18.4 allows local users to execute arbitrary code via a large maxnum value in an ioctl request.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-5751/">CVE-2006-5751</cve>
	<bugzilla href="https://bugzilla.suse.com/222656">SUSE bug 222656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20065794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-5794</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-5794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5794" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-5794" ref_url="https://www.suse.com/security/cve/CVE-2006-5794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2006:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2006-11/msg00020.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-5794/">CVE-2006-5794</cve>
	<bugzilla href="https://bugzilla.suse.com/219115">SUSE bug 219115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20066106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-6106</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-6106" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6106" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-6106" ref_url="https://www.suse.com/security/cve/CVE-2006-6106" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:035" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-6106/">CVE-2006-6106</cve>
	<bugzilla href="https://bugzilla.suse.com/227603">SUSE bug 227603</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20067243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-7243</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-7243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7243" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-7243" ref_url="https://www.suse.com/security/cve/CVE-2006-7243" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:1638-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html" source="SUSE-SU"/>
    <description>
    PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-7243/">CVE-2006-7243</cve>
	<bugzilla href="https://bugzilla.suse.com/1067090">SUSE bug 1067090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/654853">SUSE bug 654853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/893855">SUSE bug 893855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924970">SUSE bug 924970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20067250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-7250</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-7250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7250" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-7250" ref_url="https://www.suse.com/security/cve/CVE-2006-7250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0414-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00039.html" source="SUSE-SU"/>
    <description>
    The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-7250/">CVE-2006-7250</cve>
	<bugzilla href="https://bugzilla.suse.com/748738">SUSE bug 748738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883307">SUSE bug 883307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20067254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-7254</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2006-7254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7254" source="CVE"/>
    <reference ref_id="SUSE CVE-2006-7254" ref_url="https://www.suse.com/security/cve/CVE-2006-7254" source="SUSE CVE"/>
    <description>
    The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2006-7254/">CVE-2006-7254</cve>
	<bugzilla href="https://bugzilla.suse.com/1132193">SUSE bug 1132193</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334833" comment="glibc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334834" comment="glibc-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334835" comment="glibc-locale-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333938" comment="glibc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334833" comment="glibc-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334826" comment="glibc-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334834" comment="glibc-devel-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334830" comment="glibc-html is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334827" comment="glibc-i18ndata is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334828" comment="glibc-locale is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334835" comment="glibc-locale-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334832" comment="glibc-profile is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334836" comment="glibc-profile-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334829" comment="nscd is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334837" comment="glibc-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334831" comment="glibc-info is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0005</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0005" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0005" ref_url="https://www.suse.com/security/cve/CVE-2007-0005" source="SUSE CVE"/>
    <description>
    Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-0005/">CVE-2007-0005</cve>
	<bugzilla href="https://bugzilla.suse.com/242996">SUSE bug 242996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0774</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0774" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0774" ref_url="https://www.suse.com/security/cve/CVE-2007-0774" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a URI worker map routine.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-0774/">CVE-2007-0774</cve>
	<bugzilla href="https://bugzilla.suse.com/248157">SUSE bug 248157</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143130" comment="apache2-mod_jk-1.2.40-1.6 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20070899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-0899</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-0899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0899" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-0899" ref_url="https://www.suse.com/security/cve/CVE-2007-0899" source="SUSE CVE"/>
    <description>
    There is a possible heap overflow in libclamav/fsg.c before 0.100.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2007-0899/">CVE-2007-0899</cve>
	<bugzilla href="https://bugzilla.suse.com/1156183">SUSE bug 1156183</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334331" comment="clamav is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1496</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1496" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1496" ref_url="https://www.suse.com/security/cve/CVE-2007-1496" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-07/msg00005.html" source="SUSE-SU"/>
    <description>
    nfnetlink_log in netfilter in the Linux kernel before 2.6.20.3 allows attackers to cause a denial of service (crash) via unspecified vectors involving the (1) nfulnl_recv_config function, (2) using "multiple packets per netlink message", and (3) bridged packets, which trigger a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-1496/">CVE-2007-1496</cve>
	<bugzilla href="https://bugzilla.suse.com/270458">SUSE bug 270458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1497</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1497" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1497" ref_url="https://www.suse.com/security/cve/CVE-2007-1497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-07/msg00005.html" source="SUSE-SU"/>
    <description>
    nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-1497/">CVE-2007-1497</cve>
	<bugzilla href="https://bugzilla.suse.com/268298">SUSE bug 268298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/270460">SUSE bug 270460</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1669</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1669" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1669" ref_url="https://www.suse.com/security/cve/CVE-2007-1669" source="SUSE CVE"/>
    <description>
    zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-1669/">CVE-2007-1669</cve>
	<bugzilla href="https://bugzilla.suse.com/271781">SUSE bug 271781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512004" comment="zoo-2.10-1020.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513616" comment="zoo-2.10-1020.56 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1701</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1701" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1701" ref_url="https://www.suse.com/security/cve/CVE-2007-1701" source="SUSE CVE"/>
    <description>
    PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-1701/">CVE-2007-1701</cve>
	<bugzilla href="https://bugzilla.suse.com/257402">SUSE bug 257402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336869" comment="apache2-mod_php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333962" comment="php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336870" comment="php5-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336871" comment="php5-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336872" comment="php5-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336873" comment="php5-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336874" comment="php5-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336875" comment="php5-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336877" comment="php5-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728404" comment="php5-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336878" comment="php5-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336879" comment="php5-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728405" comment="php5-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728406" comment="php5-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336880" comment="php5-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336881" comment="php5-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336882" comment="php5-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336883" comment="php5-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336885" comment="php5-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336913" comment="php5-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728407" comment="php5-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336886" comment="php5-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336887" comment="php5-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336888" comment="php5-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336889" comment="php5-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336890" comment="php5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336891" comment="php5-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728408" comment="php5-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336892" comment="php5-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336893" comment="php5-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336894" comment="php5-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336895" comment="php5-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336896" comment="php5-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728409" comment="php5-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336915" comment="php5-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336897" comment="php5-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336898" comment="php5-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336899" comment="php5-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336900" comment="php5-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336917" comment="php5-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336918" comment="php5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336901" comment="php5-suhosin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336902" comment="php5-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336903" comment="php5-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336904" comment="php5-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336905" comment="php5-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336906" comment="php5-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336907" comment="php5-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336908" comment="php5-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336909" comment="php5-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336910" comment="php5-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336911" comment="php5-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336912" comment="php5-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728413" comment="apache2-mod_php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333971" comment="php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728414" comment="php72-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728415" comment="php72-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728416" comment="php72-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728417" comment="php72-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728418" comment="php72-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728419" comment="php72-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728420" comment="php72-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728421" comment="php72-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728422" comment="php72-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728423" comment="php72-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728424" comment="php72-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728425" comment="php72-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728426" comment="php72-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728427" comment="php72-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728428" comment="php72-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728429" comment="php72-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728430" comment="php72-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728431" comment="php72-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728432" comment="php72-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728433" comment="php72-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728434" comment="php72-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728435" comment="php72-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728436" comment="php72-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728437" comment="php72-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728438" comment="php72-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728439" comment="php72-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728440" comment="php72-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728441" comment="php72-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728442" comment="php72-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728443" comment="php72-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728444" comment="php72-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728445" comment="php72-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728446" comment="php72-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728447" comment="php72-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728448" comment="php72-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728449" comment="php72-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728450" comment="php72-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728451" comment="php72-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728452" comment="php72-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728453" comment="php72-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728454" comment="php72-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728455" comment="php72-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728456" comment="php72-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728457" comment="php72-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728458" comment="php72-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728459" comment="php72-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728460" comment="php72-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728461" comment="php72-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728462" comment="php72-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728463" comment="php72-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728464" comment="php72-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728465" comment="php72-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728466" comment="php72-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1825</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-1825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1825" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-1825" ref_url="https://www.suse.com/security/cve/CVE-2007-1825" source="SUSE CVE"/>
    <description>
    Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-1825/">CVE-2007-1825</cve>
	<bugzilla href="https://bugzilla.suse.com/259751">SUSE bug 259751</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336869" comment="apache2-mod_php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333962" comment="php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336870" comment="php5-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336871" comment="php5-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336872" comment="php5-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336873" comment="php5-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336874" comment="php5-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336875" comment="php5-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336877" comment="php5-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728404" comment="php5-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336878" comment="php5-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336879" comment="php5-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728405" comment="php5-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728406" comment="php5-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336880" comment="php5-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336881" comment="php5-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336882" comment="php5-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336883" comment="php5-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336885" comment="php5-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336913" comment="php5-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728407" comment="php5-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336886" comment="php5-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336887" comment="php5-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336888" comment="php5-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336889" comment="php5-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336890" comment="php5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336891" comment="php5-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728408" comment="php5-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336892" comment="php5-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336893" comment="php5-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336894" comment="php5-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336895" comment="php5-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336896" comment="php5-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728409" comment="php5-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336915" comment="php5-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336897" comment="php5-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336898" comment="php5-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336899" comment="php5-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336900" comment="php5-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336917" comment="php5-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336918" comment="php5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336901" comment="php5-suhosin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336902" comment="php5-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336903" comment="php5-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336904" comment="php5-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336905" comment="php5-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336906" comment="php5-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336907" comment="php5-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336908" comment="php5-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336909" comment="php5-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336910" comment="php5-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336911" comment="php5-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336912" comment="php5-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728413" comment="apache2-mod_php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333971" comment="php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728414" comment="php72-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728415" comment="php72-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728416" comment="php72-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728417" comment="php72-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728418" comment="php72-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728419" comment="php72-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728420" comment="php72-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728421" comment="php72-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728422" comment="php72-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728423" comment="php72-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728424" comment="php72-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728425" comment="php72-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728426" comment="php72-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728427" comment="php72-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728428" comment="php72-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728429" comment="php72-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728430" comment="php72-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728431" comment="php72-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728432" comment="php72-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728433" comment="php72-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728434" comment="php72-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728435" comment="php72-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728436" comment="php72-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728437" comment="php72-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728438" comment="php72-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728439" comment="php72-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728440" comment="php72-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728441" comment="php72-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728442" comment="php72-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728443" comment="php72-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728444" comment="php72-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728445" comment="php72-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728446" comment="php72-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728447" comment="php72-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728448" comment="php72-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728449" comment="php72-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728450" comment="php72-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728451" comment="php72-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728452" comment="php72-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728453" comment="php72-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728454" comment="php72-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728455" comment="php72-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728456" comment="php72-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728457" comment="php72-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728458" comment="php72-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728459" comment="php72-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728460" comment="php72-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728461" comment="php72-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728462" comment="php72-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728463" comment="php72-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728464" comment="php72-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728465" comment="php72-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728466" comment="php72-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20072052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-2052</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-2052" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2052" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-2052" ref_url="https://www.suse.com/security/cve/CVE-2007-2052" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2007:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2052/">CVE-2007-2052</cve>
	<bugzilla href="https://bugzilla.suse.com/276889">SUSE bug 276889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336104" comment="python-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336100" comment="python-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336102" comment="python-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20072721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-2721</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-2721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2721" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-2721" ref_url="https://www.suse.com/security/cve/CVE-2007-2721" source="SUSE CVE"/>
    <description>
    The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2721/">CVE-2007-2721</cve>
	<bugzilla href="https://bugzilla.suse.com/258253">SUSE bug 258253</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/339731">SUSE bug 339731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/340138">SUSE bug 340138</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334003" comment="ghostscript is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335323" comment="ghostscript-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334003" comment="ghostscript is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335322" comment="ghostscript-x11 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20072788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-2788</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-2788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2788" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-2788" ref_url="https://www.suse.com/security/cve/CVE-2007-2788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2788/">CVE-2007-2788</cve>
	<bugzilla href="https://bugzilla.suse.com/284436">SUSE bug 284436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/303898">SUSE bug 303898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20072875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-2875</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-2875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2875" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-2875" ref_url="https://www.suse.com/security/cve/CVE-2007-2875" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-09"/>
	<updated date="2023-07-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-2875/">CVE-2007-2875</cve>
	<bugzilla href="https://bugzilla.suse.com/280819">SUSE bug 280819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20072878" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-2878</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-2878" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2878" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-2878" ref_url="https://www.suse.com/security/cve/CVE-2007-2878" source="SUSE CVE"/>
    <description>
    The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel_dirent struct and cause a denial of service (system crash) via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2878/">CVE-2007-2878</cve>
	<bugzilla href="https://bugzilla.suse.com/280888">SUSE bug 280888</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3102</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3102" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3102" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3102" ref_url="https://www.suse.com/security/cve/CVE-2007-3102" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3102/">CVE-2007-3102</cve>
	<bugzilla href="https://bugzilla.suse.com/287523">SUSE bug 287523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545271">SUSE bug 545271</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3104</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3104" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3104" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3104" ref_url="https://www.suse.com/security/cve/CVE-2007-3104" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html" source="SUSE-SU"/>
    <description>
    The sysfs_readdir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux (RHEL) 4.5 and other distributions, allows users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-21"/>
	<updated date="2023-05-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3104/">CVE-2007-3104</cve>
	<bugzilla href="https://bugzilla.suse.com/329758">SUSE bug 329758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3107</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3107" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3107" ref_url="https://www.suse.com/security/cve/CVE-2007-3107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-3107/">CVE-2007-3107</cve>
	<bugzilla href="https://bugzilla.suse.com/290622">SUSE bug 290622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/329765">SUSE bug 329765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3126</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3126" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3126" ref_url="https://www.suse.com/security/cve/CVE-2007-3126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-April/002784.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0994-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-04/msg00046.html" source="SUSE-SU"/>
    <description>
    Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-3126/">CVE-2007-3126</cve>
	<bugzilla href="https://bugzilla.suse.com/1032241">SUSE bug 1032241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150803" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150804" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150805" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150808" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167012" comment="gimp-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167013" comment="gimp-lang-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167014" comment="gimp-plugins-python-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167017" comment="gimp-devel-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009518545" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009518546" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009518547" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009518548" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009518549" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009541171" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541172" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541173" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792102" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792103" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792104" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792105" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792106" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792107" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792103" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792104" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3513</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3513" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3513" ref_url="https://www.suse.com/security/cve/CVE-2007-3513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service (memory consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3513/">CVE-2007-3513</cve>
	<bugzilla href="https://bugzilla.suse.com/293092">SUSE bug 293092</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3719</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3719" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3719" ref_url="https://www.suse.com/security/cve/CVE-2007-3719" source="SUSE CVE"/>
    <description>
    The process scheduler in the Linux kernel 2.6.16 gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service (CPU consumption), as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-3719/">CVE-2007-3719</cve>
	<bugzilla href="https://bugzilla.suse.com/291701">SUSE bug 291701</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3851</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3851" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3851" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3851" ref_url="https://www.suse.com/security/cve/CVE-2007-3851" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3851/">CVE-2007-3851</cve>
	<bugzilla href="https://bugzilla.suse.com/298309">SUSE bug 298309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3852</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3852" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3852" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3852" ref_url="https://www.suse.com/security/cve/CVE-2007-3852" source="SUSE CVE"/>
    <description>
    The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3852/">CVE-2007-3852</cve>
	<bugzilla href="https://bugzilla.suse.com/298308">SUSE bug 298308</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334321" comment="sysstat is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334321" comment="sysstat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337619" comment="sysstat-isag is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3996</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3996" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3996" ref_url="https://www.suse.com/security/cve/CVE-2007-3996" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-3996/">CVE-2007-3996</cve>
	<bugzilla href="https://bugzilla.suse.com/307272">SUSE bug 307272</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336869" comment="apache2-mod_php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333962" comment="php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336870" comment="php5-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336871" comment="php5-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336872" comment="php5-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336873" comment="php5-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336874" comment="php5-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336875" comment="php5-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336877" comment="php5-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728404" comment="php5-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336878" comment="php5-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336879" comment="php5-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728405" comment="php5-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728406" comment="php5-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336880" comment="php5-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336881" comment="php5-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336882" comment="php5-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336883" comment="php5-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336885" comment="php5-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336913" comment="php5-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728407" comment="php5-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336886" comment="php5-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336887" comment="php5-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336888" comment="php5-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336889" comment="php5-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336890" comment="php5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336891" comment="php5-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728408" comment="php5-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336892" comment="php5-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336893" comment="php5-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336894" comment="php5-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336895" comment="php5-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336896" comment="php5-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728409" comment="php5-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336915" comment="php5-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336897" comment="php5-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336898" comment="php5-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336899" comment="php5-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336900" comment="php5-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336917" comment="php5-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336918" comment="php5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336901" comment="php5-suhosin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336902" comment="php5-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336903" comment="php5-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336904" comment="php5-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336905" comment="php5-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336906" comment="php5-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336907" comment="php5-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336908" comment="php5-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336909" comment="php5-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336910" comment="php5-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336911" comment="php5-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336912" comment="php5-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728413" comment="apache2-mod_php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333971" comment="php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728414" comment="php72-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728415" comment="php72-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728416" comment="php72-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728417" comment="php72-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728418" comment="php72-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728419" comment="php72-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728420" comment="php72-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728421" comment="php72-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728422" comment="php72-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728423" comment="php72-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728424" comment="php72-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728425" comment="php72-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728426" comment="php72-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728427" comment="php72-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728428" comment="php72-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728429" comment="php72-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728430" comment="php72-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728431" comment="php72-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728432" comment="php72-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728433" comment="php72-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728434" comment="php72-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728435" comment="php72-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728436" comment="php72-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728437" comment="php72-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728438" comment="php72-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728439" comment="php72-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728440" comment="php72-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728441" comment="php72-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728442" comment="php72-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728443" comment="php72-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728444" comment="php72-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728445" comment="php72-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728446" comment="php72-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728447" comment="php72-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728448" comment="php72-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728449" comment="php72-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728450" comment="php72-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728451" comment="php72-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728452" comment="php72-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728453" comment="php72-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728454" comment="php72-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728455" comment="php72-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728456" comment="php72-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728457" comment="php72-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728458" comment="php72-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728459" comment="php72-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728460" comment="php72-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728461" comment="php72-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728462" comment="php72-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728463" comment="php72-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728464" comment="php72-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728465" comment="php72-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728466" comment="php72-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3999</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-3999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3999" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-3999" ref_url="https://www.suse.com/security/cve/CVE-2007-3999" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2007:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-11/msg00003.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2007-3999/">CVE-2007-3999</cve>
	<bugzilla href="https://bugzilla.suse.com/302377">SUSE bug 302377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/305261">SUSE bug 305261</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141676" comment="librpcsecgss3-0.19-16.56 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144925" comment="librpcsecgss-devel-0.19-16.56 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4129</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4129" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4129" ref_url="https://www.suse.com/security/cve/CVE-2007-4129" source="SUSE CVE"/>
    <description>
    CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-4129/">CVE-2007-4129</cve>
	<bugzilla href="https://bugzilla.suse.com/304180">SUSE bug 304180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140495" comment="coolkey-1.1.0-147.71 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144724" comment="coolkey-devel-1.1.0-147.71 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147514" comment="coolkey-1.1.0-147.67 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512065" comment="coolkey-1.1.0-148.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513639" comment="coolkey-devel-1.1.0-148.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4133</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4133" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4133" ref_url="https://www.suse.com/security/cve/CVE-2007-4133" source="SUSE CVE"/>
    <description>
    The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which allows local users to cause a denial of service (panic) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-4133/">CVE-2007-4133</cve>
	<bugzilla href="https://bugzilla.suse.com/328899">SUSE bug 328899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4308</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4308" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4308" ref_url="https://www.suse.com/security/cve/CVE-2007-4308" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html" source="SUSE-SU"/>
    <description>
    The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-4308/">CVE-2007-4308</cve>
	<bugzilla href="https://bugzilla.suse.com/326270">SUSE bug 326270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/329764">SUSE bug 329764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4460</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4460" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4460" ref_url="https://www.suse.com/security/cve/CVE-2007-4460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2007:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-09/msg00003.html" source="SUSE-SU"/>
    <description>
    The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-4460/">CVE-2007-4460</cve>
	<bugzilla href="https://bugzilla.suse.com/307073">SUSE bug 307073</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144782" comment="id3lib-3.8.3-261.135 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4559</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4559" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4559" ref_url="https://www.suse.com/security/cve/CVE-2007-4559" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2023:1833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015129.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015212.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015213.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1950-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015217.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015218.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1953-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:1985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015233.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2047-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015255.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015256.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015258.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015259.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2286-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015486.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015596.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:2466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015682.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:3070-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016266.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016268.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2023:3084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016280.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015462.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015463.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2023:549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015788.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2463-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029776.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015128.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2509-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029881.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2517-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029893.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2778-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030189.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2884-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015532.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:2957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015621.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2023-09-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2007-4559/">CVE-2007-4559</cve>
	<bugzilla href="https://bugzilla.suse.com/1203750">SUSE bug 1203750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204077">SUSE bug 1204077</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764812" comment="python36-devel-3.6.15-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764820" comment="libpython3_6m1_0-3.6.15-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764821" comment="libpython3_6m1_0-32bit-3.6.15-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764822" comment="python36-3.6.15-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764823" comment="python36-base-3.6.15-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764867" comment="libpython3_6m1_0-3.6.15-6.91.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764868" comment="python36-3.6.15-6.91.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764869" comment="python36-base-3.6.15-6.91.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764870" comment="python36-curses-3.6.15-6.91.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764871" comment="python36-dbm-3.6.15-6.91.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764872" comment="python36-devel-3.6.15-6.91.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764873" comment="python36-idle-3.6.15-6.91.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764874" comment="python36-testsuite-3.6.15-6.91.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764875" comment="python36-tk-3.6.15-6.91.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009764876" comment="python36-tools-3.6.15-6.91.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4567</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4567" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4567" ref_url="https://www.suse.com/security/cve/CVE-2007-4567" source="SUSE CVE"/>
    <description>
    The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-4567/">CVE-2007-4567</cve>
	<bugzilla href="https://bugzilla.suse.com/307626">SUSE bug 307626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/570608">SUSE bug 570608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4571</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4571" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4571" ref_url="https://www.suse.com/security/cve/CVE-2007-4571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-10/msg00000.html" source="SUSE-SU"/>
    <description>
    The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2007-4571/">CVE-2007-4571</cve>
	<bugzilla href="https://bugzilla.suse.com/328404">SUSE bug 328404</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4670</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4670" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4670" ref_url="https://www.suse.com/security/cve/CVE-2007-4670" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-4670/">CVE-2007-4670</cve>
	<bugzilla href="https://bugzilla.suse.com/307272">SUSE bug 307272</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336869" comment="apache2-mod_php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333962" comment="php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336870" comment="php5-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336871" comment="php5-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336872" comment="php5-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336873" comment="php5-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336874" comment="php5-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336875" comment="php5-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336877" comment="php5-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728404" comment="php5-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336878" comment="php5-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336879" comment="php5-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728405" comment="php5-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728406" comment="php5-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336880" comment="php5-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336881" comment="php5-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336882" comment="php5-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336883" comment="php5-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336885" comment="php5-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336913" comment="php5-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728407" comment="php5-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336886" comment="php5-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336887" comment="php5-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336888" comment="php5-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336889" comment="php5-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336890" comment="php5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336891" comment="php5-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728408" comment="php5-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336892" comment="php5-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336893" comment="php5-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336894" comment="php5-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336895" comment="php5-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336896" comment="php5-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728409" comment="php5-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336915" comment="php5-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336897" comment="php5-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336898" comment="php5-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336899" comment="php5-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336900" comment="php5-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336917" comment="php5-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336918" comment="php5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336901" comment="php5-suhosin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336902" comment="php5-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336903" comment="php5-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336904" comment="php5-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336905" comment="php5-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336906" comment="php5-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336907" comment="php5-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336908" comment="php5-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336909" comment="php5-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336910" comment="php5-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336911" comment="php5-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336912" comment="php5-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728413" comment="apache2-mod_php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333971" comment="php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728414" comment="php72-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728415" comment="php72-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728416" comment="php72-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728417" comment="php72-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728418" comment="php72-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728419" comment="php72-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728420" comment="php72-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728421" comment="php72-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728422" comment="php72-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728423" comment="php72-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728424" comment="php72-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728425" comment="php72-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728426" comment="php72-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728427" comment="php72-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728428" comment="php72-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728429" comment="php72-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728430" comment="php72-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728431" comment="php72-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728432" comment="php72-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728433" comment="php72-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728434" comment="php72-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728435" comment="php72-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728436" comment="php72-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728437" comment="php72-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728438" comment="php72-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728439" comment="php72-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728440" comment="php72-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728441" comment="php72-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728442" comment="php72-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728443" comment="php72-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728444" comment="php72-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728445" comment="php72-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728446" comment="php72-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728447" comment="php72-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728448" comment="php72-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728449" comment="php72-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728450" comment="php72-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728451" comment="php72-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728452" comment="php72-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728453" comment="php72-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728454" comment="php72-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728455" comment="php72-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728456" comment="php72-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728457" comment="php72-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728458" comment="php72-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728459" comment="php72-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728460" comment="php72-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728461" comment="php72-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728462" comment="php72-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728463" comment="php72-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728464" comment="php72-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728465" comment="php72-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728466" comment="php72-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4772</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4772" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4772" ref_url="https://www.suse.com/security/cve/CVE-2007-4772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0539-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0555-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:0677-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0531-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0578-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html" source="SUSE-SU"/>
    <description>
    The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-4772/">CVE-2007-4772</cve>
	<bugzilla href="https://bugzilla.suse.com/329282">SUSE bug 329282</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539988" comment="postgresql94-devel-9.4.6-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009515793" comment="libecpg6-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009515794" comment="libpq5-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009515795" comment="libpq5-32bit-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009515790" comment="postgresql93-9.3.11-14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009515796" comment="postgresql94-9.4.6-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009515793" comment="libecpg6-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009515794" comment="libpq5-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009515795" comment="libpq5-32bit-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009515796" comment="postgresql94-9.4.6-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009539986" comment="postgresql93-devel-9.3.11-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539988" comment="postgresql94-devel-9.4.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009544584" comment="libecpg6-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544585" comment="libpq5-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544586" comment="libpq5-32bit-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544576" comment="postgresql93-9.3.11-14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544577" comment="postgresql93-contrib-9.3.11-14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544578" comment="postgresql93-docs-9.3.11-14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544579" comment="postgresql93-server-9.3.11-14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544587" comment="postgresql94-9.4.6-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544588" comment="postgresql94-contrib-9.4.6-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544589" comment="postgresql94-docs-9.4.6-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544590" comment="postgresql94-server-9.4.6-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009544584" comment="libecpg6-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544585" comment="libpq5-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544586" comment="libpq5-32bit-9.4.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544587" comment="postgresql94-9.4.6-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544588" comment="postgresql94-contrib-9.4.6-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544589" comment="postgresql94-docs-9.4.6-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544590" comment="postgresql94-server-9.4.6-7.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4774</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4774" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4774" ref_url="https://www.suse.com/security/cve/CVE-2007-4774" source="SUSE CVE"/>
    <description>
    The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT signals, which can can wake up a PTRACED process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2007-4774/">CVE-2007-4774</cve>
	<bugzilla href="https://bugzilla.suse.com/1161116">SUSE bug 1161116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4783</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4783" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4783" ref_url="https://www.suse.com/security/cve/CVE-2007-4783" source="SUSE CVE"/>
    <description>
    The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service (application crash) via a long string in the charset parameter, probably also requiring a long string in the str parameter; or (2) a denial of service (temporary application hang) via a long string in the str parameter.  NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-4783/">CVE-2007-4783</cve>
	<bugzilla href="https://bugzilla.suse.com/308069">SUSE bug 308069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/325827">SUSE bug 325827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4840</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4840" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4840" ref_url="https://www.suse.com/security/cve/CVE-2007-4840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html" source="SUSE-SU"/>
    <description>
    PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the out_charset parameter to the iconv function; or a long string in the charset parameter to the (2) iconv_mime_decode_headers, (3) iconv_mime_decode, or (4) iconv_strlen function.  NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-4840/">CVE-2007-4840</cve>
	<bugzilla href="https://bugzilla.suse.com/308498">SUSE bug 308498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/325827">SUSE bug 325827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4887</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-4887" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4887" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-4887" ref_url="https://www.suse.com/security/cve/CVE-2007-4887" source="SUSE CVE"/>
    <description>
    The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long string in the library parameter.  NOTE: there are limited usage scenarios under which this would be a vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-4887/">CVE-2007-4887</cve>
	<bugzilla href="https://bugzilla.suse.com/325657">SUSE bug 325657</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20075899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-5899</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-5899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5899" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-5899" ref_url="https://www.suse.com/security/cve/CVE-2007-5899" source="SUSE CVE"/>
    <description>
    The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-5899/">CVE-2007-5899</cve>
	<bugzilla href="https://bugzilla.suse.com/341273">SUSE bug 341273</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336869" comment="apache2-mod_php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333962" comment="php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336870" comment="php5-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336871" comment="php5-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336872" comment="php5-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336873" comment="php5-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336874" comment="php5-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336875" comment="php5-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336877" comment="php5-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728404" comment="php5-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336878" comment="php5-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336879" comment="php5-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728405" comment="php5-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728406" comment="php5-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336880" comment="php5-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336881" comment="php5-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336882" comment="php5-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336883" comment="php5-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336885" comment="php5-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336913" comment="php5-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728407" comment="php5-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336886" comment="php5-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336887" comment="php5-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336888" comment="php5-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336889" comment="php5-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336890" comment="php5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336891" comment="php5-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728408" comment="php5-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336892" comment="php5-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336893" comment="php5-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336894" comment="php5-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336895" comment="php5-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336896" comment="php5-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728409" comment="php5-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336915" comment="php5-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336897" comment="php5-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336898" comment="php5-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336899" comment="php5-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336900" comment="php5-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336917" comment="php5-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336918" comment="php5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336901" comment="php5-suhosin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336902" comment="php5-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336903" comment="php5-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336904" comment="php5-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336905" comment="php5-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336906" comment="php5-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336907" comment="php5-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336908" comment="php5-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336909" comment="php5-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336910" comment="php5-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336911" comment="php5-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336912" comment="php5-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728413" comment="apache2-mod_php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333971" comment="php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728414" comment="php72-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728415" comment="php72-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728416" comment="php72-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728417" comment="php72-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728418" comment="php72-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728419" comment="php72-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728420" comment="php72-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728421" comment="php72-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728422" comment="php72-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728423" comment="php72-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728424" comment="php72-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728425" comment="php72-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728426" comment="php72-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728427" comment="php72-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728428" comment="php72-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728429" comment="php72-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728430" comment="php72-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728431" comment="php72-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728432" comment="php72-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728433" comment="php72-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728434" comment="php72-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728435" comment="php72-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728436" comment="php72-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728437" comment="php72-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728438" comment="php72-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728439" comment="php72-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728440" comment="php72-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728441" comment="php72-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728442" comment="php72-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728443" comment="php72-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728444" comment="php72-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728445" comment="php72-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728446" comment="php72-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728447" comment="php72-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728448" comment="php72-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728449" comment="php72-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728450" comment="php72-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728451" comment="php72-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728452" comment="php72-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728453" comment="php72-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728454" comment="php72-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728455" comment="php72-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728456" comment="php72-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728457" comment="php72-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728458" comment="php72-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728459" comment="php72-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728460" comment="php72-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728461" comment="php72-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728462" comment="php72-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728463" comment="php72-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728464" comment="php72-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728465" comment="php72-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728466" comment="php72-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20075966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-5966</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-5966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5966" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-5966" ref_url="https://www.suse.com/security/cve/CVE-2007-5966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="TID7002558" ref_url="https://www.suse.com/support/kb/doc?id=7002558" source="SUSE-SU"/>
    <description>
    Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-5966/">CVE-2007-5966</cve>
	<bugzilla href="https://bugzilla.suse.com/347262">SUSE bug 347262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/512584">SUSE bug 512584</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20075970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-5970</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-5970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5970" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-5970" ref_url="https://www.suse.com/security/cve/CVE-2007-5970" source="SUSE CVE"/>
    <description>
    MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-5970/">CVE-2007-5970</cve>
	<bugzilla href="https://bugzilla.suse.com/348307">SUSE bug 348307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131803" comment="libmysqlclient-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131804" comment="libmysqld-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131805" comment="libmysqld18-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143236" comment="mariadb-tools-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143361" comment="mariadb-tools-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144888" comment="libmysqlclient-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144889" comment="libmysqld-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144890" comment="libmysqld18-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145144" comment="libmysqlclient-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145145" comment="libmysqld-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145146" comment="libmysqld18-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159168" comment="mariadb-tools-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159818" comment="libmysqlclient-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159819" comment="libmysqld-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159820" comment="libmysqld18-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513558" comment="mariadb-tools-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513165" comment="libmysqlclient18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513166" comment="libmysqlclient18-32bit-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513324" comment="mariadb-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513167" comment="mariadb-100-errormessages-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513325" comment="mariadb-client-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513326" comment="mariadb-errormessages-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513327" comment="mariadb-tools-10.2.25-3.19.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513740" comment="libmysqlclient-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513741" comment="libmysqld-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513742" comment="libmysqld18-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514078" comment="libmysqlclient-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514080" comment="libmysqld-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514081" comment="libmysqld18-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514300" comment="libmysqlclient_r18-32bit-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6063</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6063" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6063" ref_url="https://www.suse.com/security/cve/CVE-2007-6063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2007:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-6063/">CVE-2007-6063</cve>
	<bugzilla href="https://bugzilla.suse.com/343210">SUSE bug 343210</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6206</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6206" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6206" ref_url="https://www.suse.com/security/cve/CVE-2007-6206" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
    <description>
    The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-6206/">CVE-2007-6206</cve>
	<bugzilla href="https://bugzilla.suse.com/342686">SUSE bug 342686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6209</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6209" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6209" ref_url="https://www.suse.com/security/cve/CVE-2007-6209" source="SUSE CVE"/>
    <description>
    Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-6209/">CVE-2007-6209</cve>
	<bugzilla href="https://bugzilla.suse.com/346454">SUSE bug 346454</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339511" comment="zsh is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6335</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6335" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6335" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6335" ref_url="https://www.suse.com/security/cve/CVE-2007-6335" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-6335/">CVE-2007-6335</cve>
	<bugzilla href="https://bugzilla.suse.com/343277">SUSE bug 343277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333933" comment="clamav is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334331" comment="clamav is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6600</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6600" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6600" ref_url="https://www.suse.com/security/cve/CVE-2007-6600" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html" source="SUSE-SU"/>
    <description>
    PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-6600/">CVE-2007-6600</cve>
	<bugzilla href="https://bugzilla.suse.com/329282">SUSE bug 329282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/537706">SUSE bug 537706</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6698</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6698" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6698" ref_url="https://www.suse.com/security/cve/CVE-2007-6698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html" source="SUSE-SU"/>
    <description>
    The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-6698/">CVE-2007-6698</cve>
	<bugzilla href="https://bugzilla.suse.com/357919">SUSE bug 357919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336723" comment="compat-libldap-2_3-0 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334215" comment="openldap2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336725" comment="openldap2-back-meta is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336723" comment="compat-libldap-2_3-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334215" comment="openldap2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336725" comment="openldap2-back-meta is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336723" comment="compat-libldap-2_3-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336724" comment="libldap-2_4-2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337939" comment="libldap-2_4-2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334215" comment="openldap2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336725" comment="openldap2-back-meta is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336726" comment="openldap2-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336727" comment="openldap2-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336722" comment="openldap2-ppolicy-check-password is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336723" comment="compat-libldap-2_3-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336727" comment="openldap2-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336722" comment="openldap2-ppolicy-check-password is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336724" comment="libldap-2_4-2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337939" comment="libldap-2_4-2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334215" comment="openldap2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336725" comment="openldap2-back-meta is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336726" comment="openldap2-client is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337423" comment="openldap2-back-perl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715218" comment="openldap2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715219" comment="openldap2-devel-static is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6716</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6716" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6716" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6716" ref_url="https://www.suse.com/security/cve/CVE-2007-6716" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-08"/>
	<updated date="2023-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2007-6716/">CVE-2007-6716</cve>
	<bugzilla href="https://bugzilla.suse.com/422963">SUSE bug 422963</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6720</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6720" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6720" ref_url="https://www.suse.com/security/cve/CVE-2007-6720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html" source="SUSE-SU"/>
    <description>
    libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-6720/">CVE-2007-6720</cve>
	<bugzilla href="https://bugzilla.suse.com/468760">SUSE bug 468760</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141563" comment="libmikmod3-32bit-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144883" comment="libmikmod-devel-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6746</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6746" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6746" ref_url="https://www.suse.com/security/cve/CVE-2007-6746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1364-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000582.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0806-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00052.html" source="SUSE-SU"/>
    <description>
    telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the subject's Common Name (CN), or (3) the expiration date of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-6746/">CVE-2007-6746</cve>
	<bugzilla href="https://bugzilla.suse.com/817120">SUSE bug 817120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141815" comment="telepathy-idle-0.2.0-1.62 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6762</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2007-6762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6762" source="CVE"/>
    <reference ref_id="SUSE CVE-2007-6762" ref_url="https://www.suse.com/security/cve/CVE-2007-6762" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def-&gt;tags[] array.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2007-6762/">CVE-2007-6762</cve>
	<bugzilla href="https://bugzilla.suse.com/1143172">SUSE bug 1143172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0007</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0007" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0007" ref_url="https://www.suse.com/security/cve/CVE-2008-0007" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html" source="SUSE-SU"/>
    <description>
    Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-0007/">CVE-2008-0007</cve>
	<bugzilla href="https://bugzilla.suse.com/353207">SUSE bug 353207</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0009</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0009" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0009" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0009" ref_url="https://www.suse.com/security/cve/CVE-2008-0009" source="SUSE CVE"/>
    <description>
    The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which might allow local users to access arbitrary kernel memory locations.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-0009/">CVE-2008-0009</cve>
	<bugzilla href="https://bugzilla.suse.com/358006">SUSE bug 358006</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0352</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0352" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0352" ref_url="https://www.suse.com/security/cve/CVE-2008-0352" source="SUSE CVE"/>
    <description>
    The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly involving the Jumbo Payload hop-by-hop option (jumbogram).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-0352/">CVE-2008-0352</cve>
	<bugzilla href="https://bugzilla.suse.com/307626">SUSE bug 307626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0599</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0599" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0599" ref_url="https://www.suse.com/security/cve/CVE-2008-0599" source="SUSE CVE"/>
    <description>
    The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-0599/">CVE-2008-0599</cve>
	<bugzilla href="https://bugzilla.suse.com/387745">SUSE bug 387745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/393279">SUSE bug 393279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336869" comment="apache2-mod_php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333962" comment="php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336870" comment="php5-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336871" comment="php5-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336872" comment="php5-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336873" comment="php5-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336874" comment="php5-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336875" comment="php5-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336877" comment="php5-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728404" comment="php5-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336878" comment="php5-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336879" comment="php5-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728405" comment="php5-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728406" comment="php5-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336880" comment="php5-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336881" comment="php5-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336882" comment="php5-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336883" comment="php5-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336885" comment="php5-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336913" comment="php5-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728407" comment="php5-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336886" comment="php5-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336887" comment="php5-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336888" comment="php5-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336889" comment="php5-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336890" comment="php5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336891" comment="php5-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728408" comment="php5-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336892" comment="php5-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336893" comment="php5-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336894" comment="php5-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336895" comment="php5-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336896" comment="php5-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728409" comment="php5-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336915" comment="php5-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336897" comment="php5-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336898" comment="php5-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336899" comment="php5-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336900" comment="php5-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336917" comment="php5-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336918" comment="php5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336901" comment="php5-suhosin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336902" comment="php5-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336903" comment="php5-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336904" comment="php5-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336905" comment="php5-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336906" comment="php5-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336907" comment="php5-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336908" comment="php5-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336909" comment="php5-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336910" comment="php5-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336911" comment="php5-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336912" comment="php5-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728413" comment="apache2-mod_php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333971" comment="php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728414" comment="php72-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728415" comment="php72-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728416" comment="php72-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728417" comment="php72-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728418" comment="php72-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728419" comment="php72-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728420" comment="php72-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728421" comment="php72-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728422" comment="php72-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728423" comment="php72-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728424" comment="php72-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728425" comment="php72-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728426" comment="php72-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728427" comment="php72-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728428" comment="php72-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728429" comment="php72-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728430" comment="php72-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728431" comment="php72-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728432" comment="php72-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728433" comment="php72-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728434" comment="php72-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728435" comment="php72-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728436" comment="php72-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728437" comment="php72-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728438" comment="php72-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728439" comment="php72-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728440" comment="php72-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728441" comment="php72-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728442" comment="php72-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728443" comment="php72-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728444" comment="php72-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728445" comment="php72-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728446" comment="php72-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728447" comment="php72-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728448" comment="php72-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728449" comment="php72-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728450" comment="php72-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728451" comment="php72-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728452" comment="php72-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728453" comment="php72-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728454" comment="php72-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728455" comment="php72-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728456" comment="php72-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728457" comment="php72-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728458" comment="php72-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728459" comment="php72-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728460" comment="php72-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728461" comment="php72-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728462" comment="php72-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728463" comment="php72-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728464" comment="php72-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728465" comment="php72-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728466" comment="php72-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728467" comment="apache2-mod_php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728468" comment="php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728469" comment="php74-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728470" comment="php74-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728471" comment="php74-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728472" comment="php74-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728473" comment="php74-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728474" comment="php74-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728475" comment="php74-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728476" comment="php74-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728477" comment="php74-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728478" comment="php74-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728479" comment="php74-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728480" comment="php74-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728481" comment="php74-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728482" comment="php74-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728483" comment="php74-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728484" comment="php74-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728485" comment="php74-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728486" comment="php74-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728487" comment="php74-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728488" comment="php74-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728489" comment="php74-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728490" comment="php74-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728491" comment="php74-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728492" comment="php74-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728493" comment="php74-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728494" comment="php74-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728495" comment="php74-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728496" comment="php74-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728497" comment="php74-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728498" comment="php74-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728499" comment="php74-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728500" comment="php74-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728501" comment="php74-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728502" comment="php74-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728503" comment="php74-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728504" comment="php74-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728505" comment="php74-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728506" comment="php74-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728507" comment="php74-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728508" comment="php74-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728509" comment="php74-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728510" comment="php74-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728511" comment="php74-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728512" comment="php74-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728513" comment="php74-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728514" comment="php74-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728515" comment="php74-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728516" comment="php74-zlib is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0657</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0657" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0657" ref_url="https://www.suse.com/security/cve/CVE-2008-0657" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-0657/">CVE-2008-0657</cve>
	<bugzilla href="https://bugzilla.suse.com/347242">SUSE bug 347242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/361008">SUSE bug 361008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0674</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0674" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0674" ref_url="https://www.suse.com/security/cve/CVE-2008-0674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-0674/">CVE-2008-0674</cve>
	<bugzilla href="https://bugzilla.suse.com/359153">SUSE bug 359153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:12</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334068" comment="pcre is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009117426" comment="SUSE Linux Enterprise High Availability Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125858" comment="SUSE Linux Enterprise High Availability Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135880" comment="SUSE Linux Enterprise High Availability Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335828" comment="libpcreposix0 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159727" comment="SUSE Linux Enterprise High Availability Extension 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335823" comment="libpcre1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335824" comment="libpcre16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335825" comment="libpcrecpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335828" comment="libpcreposix0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335829" comment="pcre-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335823" comment="libpcre1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335826" comment="libpcre1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335824" comment="libpcre16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335825" comment="libpcrecpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335827" comment="libpcrecpp0-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335823" comment="libpcre1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335826" comment="libpcre1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335824" comment="libpcre16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335829" comment="pcre-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335830" comment="pcre-devel-static is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335823" comment="libpcre1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335826" comment="libpcre1-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335824" comment="libpcre16-0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335825" comment="libpcrecpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335827" comment="libpcrecpp0-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335825" comment="libpcrecpp0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335828" comment="libpcreposix0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335829" comment="pcre-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335830" comment="pcre-devel-static is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335831" comment="pcre-tools is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0928</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-0928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0928" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-0928" ref_url="https://www.suse.com/security/cve/CVE-2008-0928" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-0928/">CVE-2008-0928</cve>
	<bugzilla href="https://bugzilla.suse.com/362956">SUSE bug 362956</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141096" comment="qemu-ppc-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141097" comment="qemu-s390-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143281" comment="qemu-guest-agent-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143282" comment="qemu-lang-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143283" comment="qemu-ppc-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143284" comment="qemu-s390-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143381" comment="qemu-block-rbd-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143382" comment="qemu-guest-agent-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143383" comment="qemu-lang-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143384" comment="qemu-ppc-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143385" comment="qemu-s390-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159277" comment="qemu-arm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159279" comment="qemu-block-rbd-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159280" comment="qemu-block-ssh-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159281" comment="qemu-guest-agent-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159284" comment="qemu-lang-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159285" comment="qemu-ppc-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159286" comment="qemu-s390-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513572" comment="qemu-arm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513573" comment="qemu-block-iscsi-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513574" comment="qemu-block-rbd-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513575" comment="qemu-block-ssh-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513576" comment="qemu-guest-agent-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513577" comment="qemu-lang-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513578" comment="qemu-ppc-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513579" comment="qemu-s390-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513614" comment="qemu-ppc-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513615" comment="qemu-s390-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1187</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1187" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1187" ref_url="https://www.suse.com/security/cve/CVE-2008-1187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1187/">CVE-2008-1187</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1188</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1188" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1188" ref_url="https://www.suse.com/security/cve/CVE-2008-1188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka "The first two issues."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-1188/">CVE-2008-1188</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1189</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1189" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1189" ref_url="https://www.suse.com/security/cve/CVE-2008-1189" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the "third" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1189/">CVE-2008-1189</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1190</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1190" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1190" ref_url="https://www.suse.com/security/cve/CVE-2008-1190" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-1190/">CVE-2008-1190</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1191</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1191" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1191" ref_url="https://www.suse.com/security/cve/CVE-2008-1191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka "The fifth issue."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1191/">CVE-2008-1191</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1192</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1192" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1192" ref_url="https://www.suse.com/security/cve/CVE-2008-1192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and earlier; allows remote attackers to bypass the same origin policy and "execute local applications" via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1192/">CVE-2008-1192</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1193</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1193" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1193" ref_url="https://www.suse.com/security/cve/CVE-2008-1193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-1193/">CVE-2008-1193</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1194</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1194" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1194" ref_url="https://www.suse.com/security/cve/CVE-2008-1194" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1194/">CVE-2008-1194</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1195</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1195" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1195" ref_url="https://www.suse.com/security/cve/CVE-2008-1195" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-1195/">CVE-2008-1195</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/370353">SUSE bug 370353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1196</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1196" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1196" ref_url="https://www.suse.com/security/cve/CVE-2008-1196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1196/">CVE-2008-1196</cve>
	<bugzilla href="https://bugzilla.suse.com/368134">SUSE bug 368134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379038">SUSE bug 379038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404983">SUSE bug 404983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1227</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1227" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1227" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1227" ref_url="https://www.suse.com/security/cve/CVE-2008-1227" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via long input data.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1227/">CVE-2008-1227</cve>
	<bugzilla href="https://bugzilla.suse.com/369067">SUSE bug 369067</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141677" comment="libsilc-1_1-2-1.1.10-24.128 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141678" comment="libsilcclient-1_1-3-1.1.10-24.128 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141679" comment="silc-toolkit-1.1.10-24.128 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144929" comment="silc-toolkit-devel-1.1.10-24.128 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141677" comment="libsilc-1_1-2-1.1.10-24.128 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141678" comment="libsilcclient-1_1-3-1.1.10-24.128 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141679" comment="silc-toolkit-1.1.10-24.128 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1367</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1367" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1367" ref_url="https://www.suse.com/security/cve/CVE-2008-1367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html" source="SUSE-SU"/>
    <description>
    gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1367/">CVE-2008-1367</cve>
	<bugzilla href="https://bugzilla.suse.com/369911">SUSE bug 369911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/372038">SUSE bug 372038</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1375</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1375" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1375" ref_url="https://www.suse.com/security/cve/CVE-2008-1375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1375/">CVE-2008-1375</cve>
	<bugzilla href="https://bugzilla.suse.com/377145">SUSE bug 377145</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1420</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1420" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1420" ref_url="https://www.suse.com/security/cve/CVE-2008-1420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1420/">CVE-2008-1420</cve>
	<bugzilla href="https://bugzilla.suse.com/372246">SUSE bug 372246</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144948" comment="libvorbis-devel-1.3.3-8.23 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145171" comment="libvorbis-devel-1.3.3-8.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178241" comment="libvorbis-devel-1.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150271" comment="libvorbis-doc-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009178202" comment="libvorbis0-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178203" comment="libvorbis0-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178204" comment="libvorbisenc2-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178205" comment="libvorbisenc2-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178206" comment="libvorbisfile3-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178207" comment="libvorbisfile3-32bit-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009178247" comment="libvorbis-doc-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178202" comment="libvorbis0-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178203" comment="libvorbis0-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178204" comment="libvorbisenc2-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178205" comment="libvorbisenc2-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178206" comment="libvorbisfile3-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178207" comment="libvorbisfile3-32bit-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1483</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1483" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1483" ref_url="https://www.suse.com/security/cve/CVE-2008-1483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-December/003476.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-August/004398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2685-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004551.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:2719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-September/004564.html" source="SUSE-SU"/>
		<reference ref_id="TID7005435" ref_url="https://www.suse.com/support/kb/doc/?id=7005435" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-12/msg00032.html" source="SUSE-SU"/>
    <description>
    OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2008-1483/">CVE-2008-1483</cve>
	<bugzilla href="https://bugzilla.suse.com/1069509">SUSE bug 1069509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/373527">SUSE bug 373527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/585630">SUSE bug 585630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/647633">SUSE bug 647633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/706386">SUSE bug 706386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655193" comment="openssh-askpass-gnome is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512583" comment="openssh-7.2p2-74.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512584" comment="openssh-helpers-7.2p2-74.25.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512583" comment="openssh-7.2p2-74.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513560" comment="openssh-fips-7.2p2-74.25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512584" comment="openssh-helpers-7.2p2-74.25.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513337" comment="openssh-7.2p2-74.45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513338" comment="openssh-fips-7.2p2-74.45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513339" comment="openssh-helpers-7.2p2-74.45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009518396" comment="openssh-7.2p2-74.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009518397" comment="openssh-askpass-gnome-7.2p2-74.11.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009518398" comment="openssh-helpers-7.2p2-74.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009532649" comment="openssh-7.2p2-74.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009532650" comment="openssh-askpass-gnome-7.2p2-74.11.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009532651" comment="openssh-fips-7.2p2-74.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009532652" comment="openssh-helpers-7.2p2-74.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009535473" comment="openssh-6.6p1-54.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009535474" comment="openssh-askpass-gnome-6.6p1-54.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009535475" comment="openssh-fips-6.6p1-54.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009535476" comment="openssh-helpers-6.6p1-54.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009545760" comment="openssh-6.6p1-54.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009545761" comment="openssh-askpass-gnome-6.6p1-54.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009545762" comment="openssh-fips-6.6p1-54.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009545763" comment="openssh-helpers-6.6p1-54.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009549918" comment="openssh-7.2p2-74.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009549919" comment="openssh-askpass-gnome-7.2p2-74.11.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009549920" comment="openssh-fips-7.2p2-74.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009549921" comment="openssh-helpers-7.2p2-74.11.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1586</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1586" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1586" ref_url="https://www.suse.com/security/cve/CVE-2008-1586" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html" source="SUSE-SU"/>
    <description>
    ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and device reset) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1586/">CVE-2008-1586</cve>
	<bugzilla href="https://bugzilla.suse.com/444079">SUSE bug 444079</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335904" comment="libtiff5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335905" comment="libtiff5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1669</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1669" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1669" ref_url="https://www.suse.com/security/cve/CVE-2008-1669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:035" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html" source="SUSE-SU"/>
    <description>
    Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1669/">CVE-2008-1669</cve>
	<bugzilla href="https://bugzilla.suse.com/387055">SUSE bug 387055</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1672</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1672" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1672" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1672" ref_url="https://www.suse.com/security/cve/CVE-2008-1672" source="SUSE CVE"/>
    <description>
    OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1672/">CVE-2008-1672</cve>
	<bugzilla href="https://bugzilla.suse.com/394317">SUSE bug 394317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/404511">SUSE bug 404511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1686</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1686" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1686" ref_url="https://www.suse.com/security/cve/CVE-2008-1686" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-1686/">CVE-2008-1686</cve>
	<bugzilla href="https://bugzilla.suse.com/377602">SUSE bug 377602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379098">SUSE bug 379098</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115051" comment="vorbis-tools-1.4.0-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115052" comment="vorbis-tools-lang-1.4.0-26.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141823" comment="vorbis-tools-1.4.0-16.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141824" comment="vorbis-tools-lang-1.4.0-16.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1721</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1721" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1721" ref_url="https://www.suse.com/security/cve/CVE-2008-1721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1721/">CVE-2008-1721</cve>
	<bugzilla href="https://bugzilla.suse.com/379044">SUSE bug 379044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336104" comment="python-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336100" comment="python-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336102" comment="python-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1887</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1887" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1887" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1887" ref_url="https://www.suse.com/security/cve/CVE-2008-1887" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-1887/">CVE-2008-1887</cve>
	<bugzilla href="https://bugzilla.suse.com/379534">SUSE bug 379534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336104" comment="python-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336100" comment="python-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336102" comment="python-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1945</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1945" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1945" ref_url="https://www.suse.com/security/cve/CVE-2008-1945" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html" source="SUSE-SU"/>
    <description>
    QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-09"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2008-1945/">CVE-2008-1945</cve>
	<bugzilla href="https://bugzilla.suse.com/362956">SUSE bug 362956</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141096" comment="qemu-ppc-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141097" comment="qemu-s390-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143281" comment="qemu-guest-agent-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143282" comment="qemu-lang-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143283" comment="qemu-ppc-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143284" comment="qemu-s390-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143381" comment="qemu-block-rbd-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143382" comment="qemu-guest-agent-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143383" comment="qemu-lang-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143384" comment="qemu-ppc-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143385" comment="qemu-s390-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159277" comment="qemu-arm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159279" comment="qemu-block-rbd-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159280" comment="qemu-block-ssh-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159281" comment="qemu-guest-agent-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159284" comment="qemu-lang-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159285" comment="qemu-ppc-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159286" comment="qemu-s390-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513572" comment="qemu-arm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513573" comment="qemu-block-iscsi-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513574" comment="qemu-block-rbd-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513575" comment="qemu-block-ssh-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513576" comment="qemu-guest-agent-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513577" comment="qemu-lang-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513578" comment="qemu-ppc-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513579" comment="qemu-s390-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513614" comment="qemu-ppc-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513615" comment="qemu-s390-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1947</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-1947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-1947" ref_url="https://www.suse.com/security/cve/CVE-2008-1947" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-1947/">CVE-2008-1947</cve>
	<bugzilla href="https://bugzilla.suse.com/396962">SUSE bug 396962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/427726">SUSE bug 427726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336154" comment="tomcat-servlet-3_1-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338847" comment="tomcat-servlet-4_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2050</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2050" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2050" ref_url="https://www.suse.com/security/cve/CVE-2008-2050" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-2050/">CVE-2008-2050</cve>
	<bugzilla href="https://bugzilla.suse.com/386632">SUSE bug 386632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335123" comment="php5-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336869" comment="apache2-mod_php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333962" comment="php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336870" comment="php5-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336871" comment="php5-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336872" comment="php5-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336873" comment="php5-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336874" comment="php5-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336875" comment="php5-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336877" comment="php5-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728404" comment="php5-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336878" comment="php5-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336879" comment="php5-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728405" comment="php5-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728406" comment="php5-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336880" comment="php5-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336881" comment="php5-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336882" comment="php5-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336883" comment="php5-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336885" comment="php5-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336913" comment="php5-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728407" comment="php5-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336886" comment="php5-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336887" comment="php5-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336888" comment="php5-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336889" comment="php5-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336890" comment="php5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336891" comment="php5-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728408" comment="php5-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336892" comment="php5-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336893" comment="php5-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336894" comment="php5-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336895" comment="php5-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336896" comment="php5-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728409" comment="php5-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336915" comment="php5-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336897" comment="php5-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336898" comment="php5-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336899" comment="php5-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336900" comment="php5-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336917" comment="php5-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336918" comment="php5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336901" comment="php5-suhosin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336902" comment="php5-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336903" comment="php5-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336904" comment="php5-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336905" comment="php5-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336906" comment="php5-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336907" comment="php5-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336908" comment="php5-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336909" comment="php5-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336910" comment="php5-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336911" comment="php5-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336912" comment="php5-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728413" comment="apache2-mod_php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333971" comment="php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728414" comment="php72-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728415" comment="php72-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728416" comment="php72-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728417" comment="php72-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728418" comment="php72-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728419" comment="php72-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728420" comment="php72-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728421" comment="php72-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728422" comment="php72-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728423" comment="php72-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728424" comment="php72-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728425" comment="php72-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728426" comment="php72-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728427" comment="php72-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728428" comment="php72-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728429" comment="php72-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728430" comment="php72-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728431" comment="php72-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728432" comment="php72-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728433" comment="php72-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728434" comment="php72-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728435" comment="php72-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728436" comment="php72-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728437" comment="php72-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728438" comment="php72-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728439" comment="php72-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728440" comment="php72-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728441" comment="php72-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728442" comment="php72-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728443" comment="php72-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728444" comment="php72-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728445" comment="php72-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728446" comment="php72-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728447" comment="php72-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728448" comment="php72-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728449" comment="php72-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728450" comment="php72-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728451" comment="php72-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728452" comment="php72-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728453" comment="php72-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728454" comment="php72-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728455" comment="php72-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728456" comment="php72-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728457" comment="php72-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728458" comment="php72-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728459" comment="php72-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728460" comment="php72-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728461" comment="php72-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728462" comment="php72-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728463" comment="php72-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728464" comment="php72-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728465" comment="php72-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728466" comment="php72-zlib is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2051</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2051" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2051" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2051" ref_url="https://www.suse.com/security/cve/CVE-2008-2051" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html" source="SUSE-SU"/>
    <description>
    The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2051/">CVE-2008-2051</cve>
	<bugzilla href="https://bugzilla.suse.com/386632">SUSE bug 386632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/393287">SUSE bug 393287</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335145" comment="php7-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335146" comment="php72-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2109</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2109" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2109" ref_url="https://www.suse.com/security/cve/CVE-2008-2109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003820.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-March/003823.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0735-1" ref_url="https://lists.opensuse.org/opensuse-updates/2018-03/msg00067.html" source="SUSE-SU"/>
    <description>
    field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2109/">CVE-2008-2109</cve>
	<bugzilla href="https://bugzilla.suse.com/387731">SUSE bug 387731</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141536" comment="libid3tag0-0.15.1b-182.58 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173108" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009519025" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792101" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144871" comment="libid3tag-devel-0.15.1b-182.58 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141536" comment="libid3tag0-0.15.1b-182.58 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173167" comment="libid3tag-devel-0.15.1b-184.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173108" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009541393" comment="libid3tag-devel-0.15.1b-184.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541394" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792100" comment="libid3tag-devel-0.15.1b-184.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792101" comment="libid3tag0-0.15.1b-184.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2315</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2315" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2315" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2315" ref_url="https://www.suse.com/security/cve/CVE-2008-2315" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2315/">CVE-2008-2315</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/443653">SUSE bug 443653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336104" comment="python-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336100" comment="python-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336102" comment="python-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2316</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2316" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2316" ref_url="https://www.suse.com/security/cve/CVE-2008-2316" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2316/">CVE-2008-2316</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336104" comment="python-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336100" comment="python-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336102" comment="python-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2358</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2358" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2358" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2358" ref_url="https://www.suse.com/security/cve/CVE-2008-2358" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-12"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2358/">CVE-2008-2358</cve>
	<bugzilla href="https://bugzilla.suse.com/387819">SUSE bug 387819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2365</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2365" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2365" ref_url="https://www.suse.com/security/cve/CVE-2008-2365" source="SUSE CVE"/>
    <description>
    Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &amp;dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514. NOTE: this issue might only affect kernel versions before 2.6.16.x.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2365/">CVE-2008-2365</cve>
	<bugzilla href="https://bugzilla.suse.com/404288">SUSE bug 404288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2382</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2382" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2382" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2382" ref_url="https://www.suse.com/security/cve/CVE-2008-2382" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html" source="SUSE-SU"/>
    <description>
    The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2382/">CVE-2008-2382</cve>
	<bugzilla href="https://bugzilla.suse.com/461565">SUSE bug 461565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/464142">SUSE bug 464142</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141096" comment="qemu-ppc-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141097" comment="qemu-s390-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143281" comment="qemu-guest-agent-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143282" comment="qemu-lang-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143283" comment="qemu-ppc-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143284" comment="qemu-s390-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143381" comment="qemu-block-rbd-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143382" comment="qemu-guest-agent-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143383" comment="qemu-lang-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143384" comment="qemu-ppc-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143385" comment="qemu-s390-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159277" comment="qemu-arm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159279" comment="qemu-block-rbd-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159280" comment="qemu-block-ssh-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159281" comment="qemu-guest-agent-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159284" comment="qemu-lang-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159285" comment="qemu-ppc-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159286" comment="qemu-s390-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513572" comment="qemu-arm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513573" comment="qemu-block-iscsi-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513574" comment="qemu-block-rbd-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513575" comment="qemu-block-ssh-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513576" comment="qemu-guest-agent-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513577" comment="qemu-lang-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513578" comment="qemu-ppc-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513579" comment="qemu-s390-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513614" comment="qemu-ppc-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513615" comment="qemu-s390-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2544</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2544" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2544" ref_url="https://www.suse.com/security/cve/CVE-2008-2544" source="SUSE CVE"/>
    <description>
    Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2008-2544/">CVE-2008-2544</cve>
	<bugzilla href="https://bugzilla.suse.com/1189500">SUSE bug 1189500</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2750</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2750" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2750" ref_url="https://www.suse.com/security/cve/CVE-2008-2750" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html" source="SUSE-SU"/>
    <description>
    The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service (kernel heap memory corruption and system crash) and possibly have unspecified other impact via a crafted PPPOL2TP packet that results in a large value for a certain length variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2750/">CVE-2008-2750</cve>
	<bugzilla href="https://bugzilla.suse.com/400874">SUSE bug 400874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2812</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2812" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2812" ref_url="https://www.suse.com/security/cve/CVE-2008-2812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:035" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2008-2812/">CVE-2008-2812</cve>
	<bugzilla href="https://bugzilla.suse.com/1175688">SUSE bug 1175688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/405017">SUSE bug 405017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2826</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2826" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2826" ref_url="https://www.suse.com/security/cve/CVE-2008-2826" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) functionality in the Linux kernel before 2.6.25.9 allows local users to cause a denial of service (resource consumption and system outage) via vectors involving a large addr_num field in an sctp_getaddrs_old data structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-09"/>
	<updated date="2023-07-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2826/">CVE-2008-2826</cve>
	<bugzilla href="https://bugzilla.suse.com/402607">SUSE bug 402607</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2931</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2931" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2931" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2931" ref_url="https://www.suse.com/security/cve/CVE-2008-2931" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:035" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2008-2931/">CVE-2008-2931</cve>
	<bugzilla href="https://bugzilla.suse.com/1175780">SUSE bug 1175780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/407428">SUSE bug 407428</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2938</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-2938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2938" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-2938" ref_url="https://www.suse.com/security/cve/CVE-2008-2938" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="TID7006398" ref_url="https://www.suse.com/support/kb/doc/?id=7006398" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-2938/">CVE-2008-2938</cve>
	<bugzilla href="https://bugzilla.suse.com/417217">SUSE bug 417217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/427726">SUSE bug 427726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336154" comment="tomcat-servlet-3_1-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3142</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3142" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3142" ref_url="https://www.suse.com/security/cve/CVE-2008-3142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3142/">CVE-2008-3142</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336104" comment="python-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336100" comment="python-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336102" comment="python-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3143</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3143" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3143" ref_url="https://www.suse.com/security/cve/CVE-2008-3143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by "checks for integer overflows, contributed by Google."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3143/">CVE-2008-3143</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/444989">SUSE bug 444989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/609759">SUSE bug 609759</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336104" comment="python-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336100" comment="python-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336102" comment="python-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3144</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3144" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3144" ref_url="https://www.suse.com/security/cve/CVE-2008-3144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations.  NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3144/">CVE-2008-3144</cve>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334122" comment="python is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336104" comment="python-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336099" comment="python-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336100" comment="python-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336101" comment="python-gdbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336102" comment="python-idle is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336103" comment="python-tk is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3247</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3247" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3247" ref_url="https://www.suse.com/security/cve/CVE-2008-3247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html" source="SUSE-SU"/>
    <description>
    The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86_64 platforms uses an incorrect size for ldt_desc, which allows local users to cause a denial of service (system crash) or possibly gain privileges via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3247/">CVE-2008-3247</cve>
	<bugzilla href="https://bugzilla.suse.com/408734">SUSE bug 408734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/432488">SUSE bug 432488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3272</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3272" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3272" ref_url="https://www.suse.com/security/cve/CVE-2008-3272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2008-3272/">CVE-2008-3272</cve>
	<bugzilla href="https://bugzilla.suse.com/414947">SUSE bug 414947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3275</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3275" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3275" ref_url="https://www.suse.com/security/cve/CVE-2008-3275" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
    <description>
    The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2008-3275/">CVE-2008-3275</cve>
	<bugzilla href="https://bugzilla.suse.com/413936">SUSE bug 413936</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3276</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3276" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3276" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3276" ref_url="https://www.suse.com/security/cve/CVE-2008-3276" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service (panic) via a crafted integer value, related to Change L and Change R options without at least one byte in the dccpsf_val field.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3276/">CVE-2008-3276</cve>
	<bugzilla href="https://bugzilla.suse.com/417505">SUSE bug 417505</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3496</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3496" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3496" ref_url="https://www.suse.com/security/cve/CVE-2008-3496" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-3496/">CVE-2008-3496</cve>
	<bugzilla href="https://bugzilla.suse.com/415702">SUSE bug 415702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3522</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3522" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3522" ref_url="https://www.suse.com/security/cve/CVE-2008-3522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:2775-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002398.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-November/002399.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2722-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-3522/">CVE-2008-3522</cve>
	<bugzilla href="https://bugzilla.suse.com/1178702">SUSE bug 1178702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/392410">SUSE bug 392410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150816" comment="libjasper-devel-1.900.14-194.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177659" comment="libjasper-devel-1.900.14-195.8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009532011" comment="libjasper1-1.900.14-181.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009540355" comment="libjasper-devel-1.900.14-181.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009540751" comment="libjasper-devel-1.900.14-181.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792108" comment="libjasper-devel-1.900.14-181.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150812" comment="libjasper1-1.900.14-194.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150813" comment="libjasper1-32bit-1.900.14-194.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009177649" comment="libjasper1-1.900.14-195.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177650" comment="libjasper1-32bit-1.900.14-195.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513138" comment="libjasper1-1.900.14-195.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513139" comment="libjasper1-32bit-1.900.14-195.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009516634" comment="libjasper1-1.900.14-181.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009516635" comment="libjasper1-32bit-1.900.14-181.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009547173" comment="libjasper1-1.900.14-181.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009547174" comment="libjasper1-32bit-1.900.14-181.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009549160" comment="libjasper1-1.900.14-181.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009547174" comment="libjasper1-32bit-1.900.14-181.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3526</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3526" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3526" ref_url="https://www.suse.com/security/cve/CVE-2008-3526" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3526/">CVE-2008-3526</cve>
	<bugzilla href="https://bugzilla.suse.com/421003">SUSE bug 421003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3527</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3527" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3527" ref_url="https://www.suse.com/security/cve/CVE-2008-3527" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3527/">CVE-2008-3527</cve>
	<bugzilla href="https://bugzilla.suse.com/437689">SUSE bug 437689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3528</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3528" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3528" ref_url="https://www.suse.com/security/cve/CVE-2008-3528" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir-&gt;i_size and dir-&gt;i_blocks values and performing (a) read or (b) write operations. NOTE: there are limited scenarios in which this crosses privilege boundaries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3528/">CVE-2008-3528</cve>
	<bugzilla href="https://bugzilla.suse.com/427244">SUSE bug 427244</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3534</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3534" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3534" ref_url="https://www.suse.com/security/cve/CVE-2008-3534" source="SUSE CVE"/>
    <description>
    The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of "useless pages" and improper maintenance of the i_blocks count.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3534/">CVE-2008-3534</cve>
	<bugzilla href="https://bugzilla.suse.com/414257">SUSE bug 414257</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3535</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3535" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3535" ref_url="https://www.suse.com/security/cve/CVE-2008-3535" source="SUSE CVE"/>
    <description>
    Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-10"/>
	<updated date="2023-07-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3535/">CVE-2008-3535</cve>
	<bugzilla href="https://bugzilla.suse.com/414257">SUSE bug 414257</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3792</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3792" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3792" ref_url="https://www.suse.com/security/cve/CVE-2008-3792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
    <description>
    net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4 does not verify that the SCTP-AUTH extension is enabled before proceeding with SCTP-AUTH API functions, which allows attackers to cause a denial of service (NULL pointer dereference and panic) via vectors that result in calls to (1) sctp_setsockopt_auth_chunk, (2) sctp_setsockopt_hmac_ident, (3) sctp_setsockopt_auth_key, (4) sctp_setsockopt_active_key, (5) sctp_setsockopt_del_key, (6) sctp_getsockopt_maxburst, (7) sctp_getsockopt_active_key, (8) sctp_getsockopt_peer_auth_chunks, or (9) sctp_getsockopt_local_auth_chunks.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3792/">CVE-2008-3792</cve>
	<bugzilla href="https://bugzilla.suse.com/423541">SUSE bug 423541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3825</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3825" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3825" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3825" ref_url="https://www.suse.com/security/cve/CVE-2008-3825" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html" source="SUSE-SU"/>
    <description>
    pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3825/">CVE-2008-3825</cve>
	<bugzilla href="https://bugzilla.suse.com/425861">SUSE bug 425861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147601" comment="pam_krb5-2.4.4-4.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141061" comment="pam_krb5-2.4.4-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141062" comment="pam_krb5-32bit-2.4.4-4.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3831</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3831" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3831" ref_url="https://www.suse.com/security/cve/CVE-2008-3831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
    <description>
    The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manager (DRM) master, which allows local users to cause a denial of service (memory corruption) via a crafted ioctl call, related to absence of the DRM_MASTER and DRM_ROOT_ONLY flags in the ioctl's configuration.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3831/">CVE-2008-3831</cve>
	<bugzilla href="https://bugzilla.suse.com/429919">SUSE bug 429919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3833</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3833" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3833" ref_url="https://www.suse.com/security/cve/CVE-2008-3833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3833/">CVE-2008-3833</cve>
	<bugzilla href="https://bugzilla.suse.com/432487">SUSE bug 432487</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3836</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3836" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3836" ref_url="https://www.suse.com/security/cve/CVE-2008-3836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html" source="SUSE-SU"/>
    <description>
    feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vectors related to feed preview and the (1) elem.doCommand, (2) elem.dispatchEvent, (3) _setTitleText, (4) _setTitleImage, and (5) _initSubscriptionUI functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-12"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3836/">CVE-2008-3836</cve>
	<bugzilla href="https://bugzilla.suse.com/429179">SUSE bug 429179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3915</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-3915" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3915" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-3915" ref_url="https://www.suse.com/security/cve/CVE-2008-3915" source="SUSE CVE"/>
    <description>
    Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-3915/">CVE-2008-3915</cve>
	<bugzilla href="https://bugzilla.suse.com/423515">SUSE bug 423515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4113</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4113" ref_url="https://www.suse.com/security/cve/CVE-2008-4113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
    <description>
    The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4113/">CVE-2008-4113</cve>
	<bugzilla href="https://bugzilla.suse.com/429781">SUSE bug 429781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/432898">SUSE bug 432898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4210</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4210" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4210" ref_url="https://www.suse.com/security/cve/CVE-2008-4210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2008:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-22"/>
	<updated date="2023-05-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-4210/">CVE-2008-4210</cve>
	<bugzilla href="https://bugzilla.suse.com/429478">SUSE bug 429478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/432487">SUSE bug 432487</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4225</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4225" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4225" ref_url="https://www.suse.com/security/cve/CVE-2008-4225" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-4225/">CVE-2008-4225</cve>
	<bugzilla href="https://bugzilla.suse.com/445677">SUSE bug 445677</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103734" comment="libxml2-devel-2.9.1-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144964" comment="libxml2-devel-2.9.1-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145350" comment="libxml2-devel-2.9.4-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157778" comment="libxml2-devel-2.9.4-45.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513851" comment="libxml2-devel-2.9.4-46.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514210" comment="libxml2-devel-2.9.4-46.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103736" comment="libxml2-doc-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103738" comment="python-libxml2-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103738" comment="python-libxml2-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141788" comment="python-libxml2-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143262" comment="libxml2-doc-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141788" comment="python-libxml2-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157771" comment="python-libxml2-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157775" comment="libxml2-doc-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157771" comment="python-libxml2-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512597" comment="python-libxml2-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513557" comment="libxml2-doc-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512597" comment="python-libxml2-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513309" comment="libxml2-2-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513310" comment="libxml2-2-32bit-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513311" comment="libxml2-doc-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513312" comment="libxml2-tools-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513367" comment="python-libxml2-2.9.4-46.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4226</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4226" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4226" ref_url="https://www.suse.com/security/cve/CVE-2008-4226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-4226/">CVE-2008-4226</cve>
	<bugzilla href="https://bugzilla.suse.com/441368">SUSE bug 441368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103734" comment="libxml2-devel-2.9.1-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144964" comment="libxml2-devel-2.9.1-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145350" comment="libxml2-devel-2.9.4-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157778" comment="libxml2-devel-2.9.4-45.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513851" comment="libxml2-devel-2.9.4-46.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514210" comment="libxml2-devel-2.9.4-46.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103736" comment="libxml2-doc-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103738" comment="python-libxml2-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103738" comment="python-libxml2-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141788" comment="python-libxml2-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143262" comment="libxml2-doc-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141788" comment="python-libxml2-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157771" comment="python-libxml2-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157775" comment="libxml2-doc-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157771" comment="python-libxml2-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512597" comment="python-libxml2-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513557" comment="libxml2-doc-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512597" comment="python-libxml2-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513309" comment="libxml2-2-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513310" comment="libxml2-2-32bit-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513311" comment="libxml2-doc-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513312" comment="libxml2-tools-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513367" comment="python-libxml2-2.9.4-46.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4302</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4302" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4302" ref_url="https://www.suse.com/security/cve/CVE-2008-4302" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4302/">CVE-2008-4302</cve>
	<bugzilla href="https://bugzilla.suse.com/427651">SUSE bug 427651</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4307</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4307" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4307" ref_url="https://www.suse.com/security/cve/CVE-2008-4307" source="SUSE CVE"/>
    <description>
    Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2008-4307/">CVE-2008-4307</cve>
	<bugzilla href="https://bugzilla.suse.com/465672">SUSE bug 465672</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4316</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4316" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4316" ref_url="https://www.suse.com/security/cve/CVE-2008-4316" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-08-03"/>
	<cve href="https://www.suse.com/security/cve/CVE-2008-4316/">CVE-2008-4316</cve>
	<bugzilla href="https://bugzilla.suse.com/382708">SUSE bug 382708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/449927">SUSE bug 449927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/475541">SUSE bug 475541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141377" comment="libgio-fam-2.38.2-5.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513979" comment="libgio-fam-2.48.2-12.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140609" comment="libgio-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140611" comment="libglib-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140613" comment="libgmodule-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140615" comment="libgobject-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140617" comment="libgthread-2_0-0-32bit-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140609" comment="libgio-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140611" comment="libglib-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140613" comment="libgmodule-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140615" comment="libgobject-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140617" comment="libgthread-2_0-0-32bit-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141373" comment="glib2-lang-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141374" comment="glib2-tools-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141375" comment="libgio-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141376" comment="libgio-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141377" comment="libgio-fam-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141378" comment="libglib-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141379" comment="libglib-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141380" comment="libgmodule-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141381" comment="libgmodule-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141382" comment="libgobject-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141383" comment="libgobject-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141384" comment="libgthread-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141385" comment="libgthread-2_0-0-32bit-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141373" comment="glib2-lang-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141374" comment="glib2-tools-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141375" comment="libgio-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141376" comment="libgio-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141378" comment="libglib-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141379" comment="libglib-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141380" comment="libgmodule-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141381" comment="libgmodule-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141382" comment="libgobject-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141383" comment="libgobject-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141384" comment="libgthread-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141385" comment="libgthread-2_0-0-32bit-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143186" comment="glib2-lang-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143187" comment="glib2-tools-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143188" comment="libgio-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141376" comment="libgio-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143189" comment="libglib-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141379" comment="libglib-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143190" comment="libgmodule-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141381" comment="libgmodule-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143191" comment="libgobject-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141383" comment="libgobject-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143192" comment="libgthread-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141385" comment="libgthread-2_0-0-32bit-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144774" comment="glib2-devel-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144775" comment="glib2-devel-static-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141377" comment="libgio-fam-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145240" comment="glib2-devel-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145241" comment="glib2-devel-static-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512865" comment="glib2-lang-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512866" comment="glib2-tools-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512867" comment="libgio-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512868" comment="libgio-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512869" comment="libglib-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512870" comment="libglib-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512871" comment="libgmodule-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512872" comment="libgmodule-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512873" comment="libgobject-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512874" comment="libgobject-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512875" comment="libgthread-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512876" comment="libgthread-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513977" comment="glib2-devel-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513978" comment="glib2-devel-static-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513979" comment="libgio-fam-2.48.2-12.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4409</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4409" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4409" ref_url="https://www.suse.com/security/cve/CVE-2008-4409" source="SUSE CVE"/>
    <description>
    libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by use of xmllint on a certain XML document, a different vulnerability than CVE-2003-1564 and CVE-2008-3281.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4409/">CVE-2008-4409</cve>
	<bugzilla href="https://bugzilla.suse.com/432486">SUSE bug 432486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103734" comment="libxml2-devel-2.9.1-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144964" comment="libxml2-devel-2.9.1-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145350" comment="libxml2-devel-2.9.4-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157778" comment="libxml2-devel-2.9.4-45.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513851" comment="libxml2-devel-2.9.4-46.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514210" comment="libxml2-devel-2.9.4-46.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103736" comment="libxml2-doc-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103738" comment="python-libxml2-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103738" comment="python-libxml2-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141788" comment="python-libxml2-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143262" comment="libxml2-doc-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141788" comment="python-libxml2-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157771" comment="python-libxml2-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157775" comment="libxml2-doc-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157771" comment="python-libxml2-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337751" comment="libxml2-2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337753" comment="libxml2-2-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337209" comment="libxml2-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337752" comment="libxml2-tools is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512597" comment="python-libxml2-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513557" comment="libxml2-doc-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512597" comment="python-libxml2-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513309" comment="libxml2-2-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513310" comment="libxml2-2-32bit-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513311" comment="libxml2-doc-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513312" comment="libxml2-tools-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513367" comment="python-libxml2-2.9.4-46.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4445</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4445" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4445" ref_url="https://www.suse.com/security/cve/CVE-2008-4445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html" source="SUSE-SU"/>
    <description>
    The sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTP_AUTH_HMAC_ID_MAX, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function, a different vulnerability than CVE-2008-4113.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4445/">CVE-2008-4445</cve>
	<bugzilla href="https://bugzilla.suse.com/432898">SUSE bug 432898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4474</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4474" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4474" ref_url="https://www.suse.com/security/cve/CVE-2008-4474" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html" source="SUSE-SU"/>
    <description>
    freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in (1) backup_radacct, (2) clean_radacct, (3) monthly_tot_stats, (4) tot_stats, and (5) truncate_radacct.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-4474/">CVE-2008-4474</cve>
	<bugzilla href="https://bugzilla.suse.com/433762">SUSE bug 433762</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336275" comment="freeradius-server-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336276" comment="freeradius-server-krb5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336277" comment="freeradius-server-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336278" comment="freeradius-server-libs is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336279" comment="freeradius-server-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336280" comment="freeradius-server-perl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336281" comment="freeradius-server-postgresql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336282" comment="freeradius-server-python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336283" comment="freeradius-server-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336284" comment="freeradius-server-utils is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4539</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4539" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4539" ref_url="https://www.suse.com/security/cve/CVE-2008-4539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow.  NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-4539/">CVE-2008-4539</cve>
	<bugzilla href="https://bugzilla.suse.com/435135">SUSE bug 435135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/448551">SUSE bug 448551</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141096" comment="qemu-ppc-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141097" comment="qemu-s390-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143281" comment="qemu-guest-agent-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143282" comment="qemu-lang-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143283" comment="qemu-ppc-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143284" comment="qemu-s390-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143381" comment="qemu-block-rbd-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143382" comment="qemu-guest-agent-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143383" comment="qemu-lang-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143384" comment="qemu-ppc-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143385" comment="qemu-s390-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159277" comment="qemu-arm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159279" comment="qemu-block-rbd-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159280" comment="qemu-block-ssh-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159281" comment="qemu-guest-agent-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159284" comment="qemu-lang-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159285" comment="qemu-ppc-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159286" comment="qemu-s390-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513572" comment="qemu-arm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513573" comment="qemu-block-iscsi-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513574" comment="qemu-block-rbd-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513575" comment="qemu-block-ssh-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513576" comment="qemu-guest-agent-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513577" comment="qemu-lang-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513578" comment="qemu-ppc-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513579" comment="qemu-s390-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513614" comment="qemu-ppc-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513615" comment="qemu-s390-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4546</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4546" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4546" ref_url="https://www.suse.com/security/cve/CVE-2008-4546" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2008:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4546/">CVE-2008-4546</cve>
	<bugzilla href="https://bugzilla.suse.com/436058">SUSE bug 436058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4554</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4554" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4554" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4554" ref_url="https://www.suse.com/security/cve/CVE-2008-4554" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
    <description>
    The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-11"/>
	<updated date="2023-07-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4554/">CVE-2008-4554</cve>
	<bugzilla href="https://bugzilla.suse.com/435151">SUSE bug 435151</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4936</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4936" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4936" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4936" ref_url="https://www.suse.com/security/cve/CVE-2008-4936" source="SUSE CVE"/>
    <description>
    faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4936/">CVE-2008-4936</cve>
	<bugzilla href="https://bugzilla.suse.com/442596">SUSE bug 442596</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141348" comment="g3utils-1.1.36-54.100 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141349" comment="mgetty-1.1.36-54.100 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143182" comment="g3utils-1.1.36-54.75 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143183" comment="mgetty-1.1.36-54.75 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4989</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-4989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-4989" ref_url="https://www.suse.com/security/cve/CVE-2008-4989" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2008:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html" source="SUSE-SU"/>
    <description>
    The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4989/">CVE-2008-4989</cve>
	<bugzilla href="https://bugzilla.suse.com/392947">SUSE bug 392947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/441856">SUSE bug 441856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/467911">SUSE bug 467911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114254" comment="libgnutls-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114256" comment="libgnutls-openssl-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114260" comment="libgnutlsxx-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114261" comment="libgnutlsxx28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143200" comment="libgnutls-openssl27-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144859" comment="libgnutls-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144860" comment="libgnutls-openssl-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144861" comment="libgnutlsxx-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144862" comment="libgnutlsxx28-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159005" comment="libgnutls-openssl27-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159806" comment="libgnutls-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159807" comment="libgnutls-openssl-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159808" comment="libgnutlsxx-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159809" comment="libgnutlsxx28-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512898" comment="libgnutls-openssl27-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513726" comment="libgnutls-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513727" comment="libgnutls-openssl-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513728" comment="libgnutlsxx-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513729" comment="libgnutlsxx28-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5029</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5029" ref_url="https://www.suse.com/security/cve/CVE-2008-5029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2008:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html" source="SUSE-SU"/>
    <description>
    The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5029/">CVE-2008-5029</cve>
	<bugzilla href="https://bugzilla.suse.com/442364">SUSE bug 442364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/449739">SUSE bug 449739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5077</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5077" ref_url="https://www.suse.com/security/cve/CVE-2008-5077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html" source="SUSE-SU"/>
    <description>
    OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5077/">CVE-2008-5077</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/465675">SUSE bug 465675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/465676">SUSE bug 465676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/468866">SUSE bug 468866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/470968">SUSE bug 470968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/475108">SUSE bug 475108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/552497">SUSE bug 552497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/708266">SUSE bug 708266</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5079</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5079" ref_url="https://www.suse.com/security/cve/CVE-2008-5079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
    <description>
    net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2008-5079/">CVE-2008-5079</cve>
	<bugzilla href="https://bugzilla.suse.com/450417">SUSE bug 450417</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5351</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5351" ref_url="https://www.suse.com/security/cve/CVE-2008-5351" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-5351/">CVE-2008-5351</cve>
	<bugzilla href="https://bugzilla.suse.com/456770">SUSE bug 456770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/465624">SUSE bug 465624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/471829">SUSE bug 471829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/603283">SUSE bug 603283</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5519</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5519" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5519" ref_url="https://www.suse.com/security/cve/CVE-2008-5519" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included a Content-Length header but no POST data or (2) a rapid series of requests, related to noncompliance with the AJP protocol's requirements for requests containing Content-Length headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2008-5519/">CVE-2008-5519</cve>
	<bugzilla href="https://bugzilla.suse.com/493575">SUSE bug 493575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140459" comment="apache2-mod_jk-1.2.40-5.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143130" comment="apache2-mod_jk-1.2.40-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512701" comment="apache2-mod_jk-1.2.40-7.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5700</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5700" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5700" ref_url="https://www.suse.com/security/cve/CVE-2008-5700" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
    <description>
    libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2008-5700/">CVE-2008-5700</cve>
	<bugzilla href="https://bugzilla.suse.com/457896">SUSE bug 457896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5702</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5702" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5702" ref_url="https://www.suse.com/security/cve/CVE-2008-5702" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
    <description>
    Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might allow local users to have an unknown impact via a certain /dev/watchdog WDIOC_SETTIMEOUT IOCTL call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-12"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-5702/">CVE-2008-5702</cve>
	<bugzilla href="https://bugzilla.suse.com/457898">SUSE bug 457898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5913</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5913" ref_url="https://www.suse.com/security/cve/CVE-2008-5913" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
    <description>
    The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5913/">CVE-2008-5913</cve>
	<bugzilla href="https://bugzilla.suse.com/468762">SUSE bug 468762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5984</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-5984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5984" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-5984" ref_url="https://www.suse.com/security/cve/CVE-2008-5984" source="SUSE CVE"/>
    <description>
    Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5984/">CVE-2008-5984</cve>
	<bugzilla href="https://bugzilla.suse.com/470096">SUSE bug 470096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141299" comment="dia-0.97.2-13.253 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142087" comment="dia-0.97.3-15.63 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141299" comment="dia-0.97.2-13.253 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141300" comment="dia-lang-0.97.2-13.253 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142087" comment="dia-0.97.3-15.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142088" comment="dia-lang-0.97.3-15.63 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20087247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-7247</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-7247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7247" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-7247" ref_url="https://www.suse.com/security/cve/CVE-2008-7247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00006.html" source="SUSE-SU"/>
    <description>
    sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-7247/">CVE-2008-7247</cve>
	<bugzilla href="https://bugzilla.suse.com/557669">SUSE bug 557669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604528">SUSE bug 604528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131803" comment="libmysqlclient-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131804" comment="libmysqld-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131805" comment="libmysqld18-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143236" comment="mariadb-tools-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143361" comment="mariadb-tools-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144888" comment="libmysqlclient-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144889" comment="libmysqld-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144890" comment="libmysqld18-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145144" comment="libmysqlclient-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145145" comment="libmysqld-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145146" comment="libmysqld18-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159168" comment="mariadb-tools-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159818" comment="libmysqlclient-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159819" comment="libmysqld-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159820" comment="libmysqld18-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513558" comment="mariadb-tools-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513165" comment="libmysqlclient18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513166" comment="libmysqlclient18-32bit-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513324" comment="mariadb-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513167" comment="mariadb-100-errormessages-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513325" comment="mariadb-client-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513326" comment="mariadb-errormessages-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513327" comment="mariadb-tools-10.2.25-3.19.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513740" comment="libmysqlclient-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513741" comment="libmysqld-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513742" comment="libmysqld18-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514078" comment="libmysqlclient-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514080" comment="libmysqld-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514081" comment="libmysqld18-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514300" comment="libmysqlclient_r18-32bit-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20087270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-7270</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-7270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7270" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-7270" ref_url="https://www.suse.com/security/cve/CVE-2008-7270" source="SUSE CVE"/>
    <description>
    OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-10"/>
	<updated date="2023-07-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-7270/">CVE-2008-7270</cve>
	<bugzilla href="https://bugzilla.suse.com/608666">SUSE bug 608666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/724729">SUSE bug 724729</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20087316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-7316</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2008-7316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7316" source="CVE"/>
    <reference ref_id="SUSE CVE-2008-7316" ref_url="https://www.suse.com/security/cve/CVE-2008-7316" source="SUSE CVE"/>
    <description>
    mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault for an iovec of nonzero length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2008-7316/">CVE-2008-7316</cve>
	<bugzilla href="https://bugzilla.suse.com/963764">SUSE bug 963764</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0023</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0023" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0023" ref_url="https://www.suse.com/security/cve/CVE-2009-0023" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0023/">CVE-2009-0023</cve>
	<bugzilla href="https://bugzilla.suse.com/510301">SUSE bug 510301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147559" comment="libapr-util1-1.5.3-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147560" comment="libapr-util1-dbd-sqlite3-1.5.3-1.46 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513018" comment="libapr-util1-dbd-sqlite3-1.5.3-2.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168393" comment="libapr-util1-dbd-sqlite3-1.5.3-2.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168432" comment="libapr-util1-devel-1.5.3-2.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514040" comment="libapr-util1-devel-1.5.3-2.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0024</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0024" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0024" ref_url="https://www.suse.com/security/cve/CVE-2009-0024" source="SUSE CVE"/>
    <description>
    The sys_remap_file_pages function in mm/fremap.c in the Linux kernel before 2.6.24.1 allows local users to cause a denial of service or gain privileges via unspecified vectors, related to the vm_file structure member, and the mmap_region and do_munmap functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0024/">CVE-2009-0024</cve>
	<bugzilla href="https://bugzilla.suse.com/464050">SUSE bug 464050</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0029</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0029" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0029" ref_url="https://www.suse.com/security/cve/CVE-2009-0029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
    <description>
    The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0029/">CVE-2009-0029</cve>
	<bugzilla href="https://bugzilla.suse.com/466015">SUSE bug 466015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0035</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0035" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0035" ref_url="https://www.suse.com/security/cve/CVE-2009-0035" source="SUSE CVE"/>
    <description>
    alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2009-0035/">CVE-2009-0035</cve>
	<bugzilla href="https://bugzilla.suse.com/533396">SUSE bug 533396</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144709" comment="alsa-devel-1.0.27.2-11.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145009" comment="alsa-devel-1.0.27.2-11.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159741" comment="alsa-devel-1.0.27.2-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140443" comment="alsa-1.0.27.2-11.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140444" comment="alsa-docs-1.0.27.2-11.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140445" comment="libasound2-1.0.27.2-11.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140446" comment="libasound2-32bit-1.0.27.2-11.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140443" comment="alsa-1.0.27.2-11.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140444" comment="alsa-docs-1.0.27.2-11.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140445" comment="libasound2-1.0.27.2-11.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141209" comment="alsa-1.0.27.2-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141210" comment="libasound2-1.0.27.2-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140446" comment="libasound2-32bit-1.0.27.2-11.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141209" comment="alsa-1.0.27.2-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150266" comment="alsa-docs-1.0.27.2-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141210" comment="libasound2-1.0.27.2-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140446" comment="libasound2-32bit-1.0.27.2-11.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158925" comment="alsa-1.0.27.2-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158926" comment="alsa-docs-1.0.27.2-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158927" comment="libasound2-1.0.27.2-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158928" comment="libasound2-32bit-1.0.27.2-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158925" comment="alsa-1.0.27.2-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158927" comment="libasound2-1.0.27.2-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158928" comment="libasound2-32bit-1.0.27.2-15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0036</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0036" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0036" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0036" ref_url="https://www.suse.com/security/cve/CVE-2009-0036" source="SUSE CVE"/>
    <description>
    Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2009-0036/">CVE-2009-0036</cve>
	<bugzilla href="https://bugzilla.suse.com/1085554">SUSE bug 1085554</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334931" comment="libvirt-client-32bit is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334950" comment="libvirt-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335514" comment="libvirt-nss is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336190" comment="libvirt-admin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336191" comment="libvirt-daemon-driver-storage-core is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336192" comment="libvirt-daemon-driver-storage-disk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336193" comment="libvirt-daemon-driver-storage-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336194" comment="libvirt-daemon-driver-storage-logical is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336195" comment="libvirt-daemon-driver-storage-mpath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336196" comment="libvirt-daemon-driver-storage-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336197" comment="libvirt-daemon-driver-storage-scsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336198" comment="libvirt-libs is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336190" comment="libvirt-admin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336191" comment="libvirt-daemon-driver-storage-core is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336192" comment="libvirt-daemon-driver-storage-disk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336193" comment="libvirt-daemon-driver-storage-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336194" comment="libvirt-daemon-driver-storage-logical is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336195" comment="libvirt-daemon-driver-storage-mpath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336196" comment="libvirt-daemon-driver-storage-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336197" comment="libvirt-daemon-driver-storage-scsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336198" comment="libvirt-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335514" comment="libvirt-nss is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0037</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0037" ref_url="https://www.suse.com/security/cve/CVE-2009-0037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html" source="SUSE-SU"/>
    <description>
    The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0037/">CVE-2009-0037</cve>
	<bugzilla href="https://bugzilla.suse.com/475103">SUSE bug 475103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/527990">SUSE bug 527990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131794" comment="libcurl-devel-7.37.0-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144822" comment="libcurl-devel-7.37.0-2.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154450" comment="libcurl-devel-7.37.0-36.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513722" comment="libcurl-devel-7.60.0-2.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514059" comment="libcurl-devel-7.60.0-9.8 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110171" comment="libcurl4-32bit-7.37.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131101" comment="curl-7.37.0-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131102" comment="libcurl4-7.37.0-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131103" comment="libcurl4-32bit-7.37.0-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131101" comment="curl-7.37.0-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131102" comment="libcurl4-7.37.0-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141289" comment="curl-7.37.0-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141290" comment="libcurl4-7.37.0-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141291" comment="libcurl4-32bit-7.37.0-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154400" comment="curl-7.37.0-36.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154401" comment="libcurl4-7.37.0-36.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154402" comment="libcurl4-32bit-7.37.0-36.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512093" comment="curl-7.60.0-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512094" comment="libcurl4-7.60.0-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512095" comment="libcurl4-32bit-7.60.0-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512783" comment="curl-7.60.0-9.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512784" comment="libcurl4-7.60.0-9.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512785" comment="libcurl4-32bit-7.60.0-9.8 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0040</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0040" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0040" ref_url="https://www.suse.com/security/cve/CVE-2009-0040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0040/">CVE-2009-0040</cve>
	<bugzilla href="https://bugzilla.suse.com/472745">SUSE bug 472745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/608040">SUSE bug 608040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0065</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0065" ref_url="https://www.suse.com/security/cve/CVE-2009-0065" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0065/">CVE-2009-0065</cve>
	<bugzilla href="https://bugzilla.suse.com/463522">SUSE bug 463522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0159</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0159" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0159" ref_url="https://www.suse.com/security/cve/CVE-2009-0159" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0159/">CVE-2009-0159</cve>
	<bugzilla href="https://bugzilla.suse.com/484653">SUSE bug 484653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/501632">SUSE bug 501632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128799" comment="ntp-4.2.8p8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128800" comment="ntp-doc-4.2.8p8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141758" comment="ntp-4.2.6p5-24.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141759" comment="ntp-doc-4.2.6p5-24.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142039" comment="ntp-4.2.8p4-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142040" comment="ntp-doc-4.2.8p4-1.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159252" comment="ntp-4.2.8p10-63.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159253" comment="ntp-doc-4.2.8p10-63.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512577" comment="ntp-4.2.8p12-64.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512578" comment="ntp-doc-4.2.8p12-64.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513331" comment="ntp-4.2.8p13-85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513332" comment="ntp-doc-4.2.8p13-85.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0163</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0163" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0163" ref_url="https://www.suse.com/security/cve/CVE-2009-0163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0163/">CVE-2009-0163</cve>
	<bugzilla href="https://bugzilla.suse.com/485895">SUSE bug 485895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144726" comment="cups-devel-1.7.5-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141281" comment="cups-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141282" comment="cups-client-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141283" comment="cups-libs-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141284" comment="cups-libs-32bit-1.7.5-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147501" comment="cups154-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147502" comment="cups154-client-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147503" comment="cups154-filters-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147504" comment="cups154-libs-1.5.4-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513929" comment="cups-ddk-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513930" comment="cups-devel-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0179</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0179" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0179" ref_url="https://www.suse.com/security/cve/CVE-2009-0179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html" source="SUSE-SU"/>
    <description>
    libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service (application crash) by loading an XM file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0179/">CVE-2009-0179</cve>
	<bugzilla href="https://bugzilla.suse.com/468760">SUSE bug 468760</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141563" comment="libmikmod3-32bit-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144883" comment="libmikmod-devel-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0186</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0186" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0186" ref_url="https://www.suse.com/security/cve/CVE-2009-0186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0186/">CVE-2009-0186</cve>
	<bugzilla href="https://bugzilla.suse.com/481769">SUSE bug 481769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105599" comment="libsndfile-devel-1.0.25-21.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119287" comment="libsndfile-devel-1.0.25-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144931" comment="libsndfile-devel-1.0.25-18.75 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155690" comment="libsndfile-devel-1.0.25-35.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513827" comment="libsndfile-devel-1.0.25-36.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009105600" comment="libsndfile1-1.0.25-21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105601" comment="libsndfile1-32bit-1.0.25-21.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119272" comment="libsndfile1-32bit-1.0.25-25.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141680" comment="libsndfile1-1.0.25-18.75 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141681" comment="libsndfile1-32bit-1.0.25-18.75 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155684" comment="libsndfile1-1.0.25-35.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155685" comment="libsndfile1-32bit-1.0.25-35.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512465" comment="libsndfile1-1.0.25-36.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512466" comment="libsndfile1-32bit-1.0.25-36.16.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0217</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0217" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0217" ref_url="https://www.suse.com/security/cve/CVE-2009-0217" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0217/">CVE-2009-0217</cve>
	<bugzilla href="https://bugzilla.suse.com/514421">SUSE bug 514421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/521184">SUSE bug 521184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/521564">SUSE bug 521564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/530661">SUSE bug 530661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/530708">SUSE bug 530708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/530717">SUSE bug 530717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/548655">SUSE bug 548655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/561859">SUSE bug 561859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0269</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0269" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0269" ref_url="https://www.suse.com/security/cve/CVE-2009-0269" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0269/">CVE-2009-0269</cve>
	<bugzilla href="https://bugzilla.suse.com/470942">SUSE bug 470942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0316</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0316" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0316" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0316" ref_url="https://www.suse.com/security/cve/CVE-2009-0316" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2022:4619-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013343.html" source="SUSE-SU"/>
    <description>
    Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-28"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0316/">CVE-2009-0316</cve>
	<bugzilla href="https://bugzilla.suse.com/470100">SUSE bug 470100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3-ltss</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140673" comment="gvim-7.4.326-2.62 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140674" comment="vim-7.4.326-2.62 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140675" comment="vim-data-7.4.326-2.62 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147530" comment="gvim-7.4.326-2.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147531" comment="vim-7.4.326-2.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147532" comment="vim-data-7.4.326-2.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157587" comment="gvim-7.4.326-16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157588" comment="vim-7.4.326-16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157589" comment="vim-data-7.4.326-16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512943" comment="gvim-7.4.326-17.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512944" comment="vim-7.4.326-17.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512945" comment="vim-data-7.4.326-17.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728126" comment="gvim-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728127" comment="vim-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728128" comment="vim-data-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728129" comment="vim-data-common-9.0.0814-17.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728187" comment="gvim-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728188" comment="vim-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728128" comment="vim-data-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728129" comment="vim-data-common-9.0.0814-17.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728192" comment="gvim-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728193" comment="vim-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728128" comment="vim-data-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728129" comment="vim-data-common-9.0.0814-17.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009730661" comment="gvim-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009730662" comment="vim-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728128" comment="vim-data-9.0.0814-17.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728129" comment="vim-data-common-9.0.0814-17.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0322</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0322" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0322" ref_url="https://www.suse.com/security/cve/CVE-2009-0322" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1) image_type or (2) packet_size file in /sys/devices/platform/dell_rbu/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0322/">CVE-2009-0322</cve>
	<bugzilla href="https://bugzilla.suse.com/470943">SUSE bug 470943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0342</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0342" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0342" ref_url="https://www.suse.com/security/cve/CVE-2009-0342" source="SUSE CVE"/>
    <description>
    Niels Provos Systrace before 1.6f on the x86_64 Linux platform allows local users to bypass intended access restrictions by making a 64-bit syscall with a syscall number that corresponds to a policy-compliant 32-bit syscall.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0342/">CVE-2009-0342</cve>
	<bugzilla href="https://bugzilla.suse.com/483819">SUSE bug 483819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/483820">SUSE bug 483820</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0368</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0368" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0368" ref_url="https://www.suse.com/security/cve/CVE-2009-0368" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0368/">CVE-2009-0368</cve>
	<bugzilla href="https://bugzilla.suse.com/480262">SUSE bug 480262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/548555">SUSE bug 548555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141044" comment="opensc-0.13.0-1.122 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147599" comment="opensc-0.13.0-1.107 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513333" comment="opensc-0.13.0-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0580</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0580" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0580" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0580" ref_url="https://www.suse.com/security/cve/CVE-2009-0580" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0580/">CVE-2009-0580</cve>
	<bugzilla href="https://bugzilla.suse.com/509839">SUSE bug 509839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336154" comment="tomcat-servlet-3_1-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0590</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0590" ref_url="https://www.suse.com/security/cve/CVE-2009-0590" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html" source="SUSE-SU"/>
    <description>
    The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0590/">CVE-2009-0590</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/489641">SUSE bug 489641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0591</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0591" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0591" ref_url="https://www.suse.com/security/cve/CVE-2009-0591" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-0591/">CVE-2009-0591</cve>
	<bugzilla href="https://bugzilla.suse.com/489641">SUSE bug 489641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0652</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0652" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0652" ref_url="https://www.suse.com/security/cve/CVE-2009-0652" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability than CVE-2005-0233.  NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0652/">CVE-2009-0652</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0676</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0676" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0676" ref_url="https://www.suse.com/security/cve/CVE-2009-0676" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-0676/">CVE-2009-0676</cve>
	<bugzilla href="https://bugzilla.suse.com/478002">SUSE bug 478002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0688</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0688" ref_url="https://www.suse.com/security/cve/CVE-2009-0688" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0688/">CVE-2009-0688</cve>
	<bugzilla href="https://bugzilla.suse.com/499104">SUSE bug 499104</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141292" comment="cyrus-sasl-digestmd5-32bit-2.1.26-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144727" comment="cyrus-sasl-devel-2.1.26-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512101" comment="cyrus-sasl-digestmd5-32bit-2.1.26-8.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513643" comment="cyrus-sasl-devel-2.1.26-8.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140518" comment="cyrus-sasl-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140519" comment="cyrus-sasl-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140520" comment="cyrus-sasl-crammd5-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140521" comment="cyrus-sasl-crammd5-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140522" comment="cyrus-sasl-digestmd5-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140523" comment="cyrus-sasl-gssapi-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140524" comment="cyrus-sasl-gssapi-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140525" comment="cyrus-sasl-otp-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140526" comment="cyrus-sasl-otp-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140527" comment="cyrus-sasl-plain-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140528" comment="cyrus-sasl-plain-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140529" comment="cyrus-sasl-saslauthd-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140530" comment="cyrus-sasl-sqlauxprop-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140531" comment="cyrus-sasl-sqlauxprop-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140532" comment="libsasl2-3-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140533" comment="libsasl2-3-32bit-2.1.26-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140518" comment="cyrus-sasl-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140519" comment="cyrus-sasl-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140520" comment="cyrus-sasl-crammd5-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140521" comment="cyrus-sasl-crammd5-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140522" comment="cyrus-sasl-digestmd5-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141292" comment="cyrus-sasl-digestmd5-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140523" comment="cyrus-sasl-gssapi-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140524" comment="cyrus-sasl-gssapi-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140527" comment="cyrus-sasl-plain-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140528" comment="cyrus-sasl-plain-32bit-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140529" comment="cyrus-sasl-saslauthd-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140532" comment="libsasl2-3-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140533" comment="libsasl2-3-32bit-2.1.26-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140518" comment="cyrus-sasl-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140520" comment="cyrus-sasl-crammd5-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140522" comment="cyrus-sasl-digestmd5-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140523" comment="cyrus-sasl-gssapi-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140525" comment="cyrus-sasl-otp-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140527" comment="cyrus-sasl-plain-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140529" comment="cyrus-sasl-saslauthd-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140530" comment="cyrus-sasl-sqlauxprop-2.1.26-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140532" comment="libsasl2-3-2.1.26-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512096" comment="cyrus-sasl-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512097" comment="cyrus-sasl-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512098" comment="cyrus-sasl-crammd5-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512099" comment="cyrus-sasl-crammd5-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512100" comment="cyrus-sasl-digestmd5-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512101" comment="cyrus-sasl-digestmd5-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512102" comment="cyrus-sasl-gssapi-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512103" comment="cyrus-sasl-gssapi-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512104" comment="cyrus-sasl-plain-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512105" comment="cyrus-sasl-plain-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512106" comment="cyrus-sasl-saslauthd-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512107" comment="libsasl2-3-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512108" comment="libsasl2-3-32bit-2.1.26-8.7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512096" comment="cyrus-sasl-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512097" comment="cyrus-sasl-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512098" comment="cyrus-sasl-crammd5-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512099" comment="cyrus-sasl-crammd5-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512100" comment="cyrus-sasl-digestmd5-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512102" comment="cyrus-sasl-gssapi-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512103" comment="cyrus-sasl-gssapi-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512786" comment="cyrus-sasl-otp-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512787" comment="cyrus-sasl-otp-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512104" comment="cyrus-sasl-plain-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512105" comment="cyrus-sasl-plain-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512106" comment="cyrus-sasl-saslauthd-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512788" comment="cyrus-sasl-sqlauxprop-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512789" comment="cyrus-sasl-sqlauxprop-32bit-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512107" comment="libsasl2-3-2.1.26-8.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512108" comment="libsasl2-3-32bit-2.1.26-8.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0696</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0696" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0696" ref_url="https://www.suse.com/security/cve/CVE-2009-0696" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00006.html" source="SUSE-SU"/>
    <description>
    The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0696/">CVE-2009-0696</cve>
	<bugzilla href="https://bugzilla.suse.com/526185">SUSE bug 526185</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335111" comment="bind-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335110" comment="bind-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336737" comment="libbind9-161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336738" comment="libdns1110 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336739" comment="libirs161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336740" comment="libisc1107 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336744" comment="libisc1107-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336741" comment="libisccc161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336742" comment="libisccfg163 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336743" comment="liblwres161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336735" comment="python-bind is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336737" comment="libbind9-161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336738" comment="libdns1110 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336739" comment="libirs161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336740" comment="libisc1107 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336744" comment="libisc1107-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336741" comment="libisccc161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336742" comment="libisccfg163 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336743" comment="liblwres161 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0745</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0745" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0745" ref_url="https://www.suse.com/security/cve/CVE-2009-0745" source="SUSE CVE"/>
    <description>
    The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0745/">CVE-2009-0745</cve>
	<bugzilla href="https://bugzilla.suse.com/480860">SUSE bug 480860</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0754</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0754" ref_url="https://www.suse.com/security/cve/CVE-2009-0754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html" source="SUSE-SU"/>
    <description>
    PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-0754/">CVE-2009-0754</cve>
	<bugzilla href="https://bugzilla.suse.com/471419">SUSE bug 471419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/481791">SUSE bug 481791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/568527">SUSE bug 568527</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0758</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0758" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0758" ref_url="https://www.suse.com/security/cve/CVE-2009-0758" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-03"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0758/">CVE-2009-0758</cve>
	<bugzilla href="https://bugzilla.suse.com/480865">SUSE bug 480865</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140467" comment="avahi-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140468" comment="avahi-lang-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140469" comment="avahi-utils-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140470" comment="libavahi-client3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140471" comment="libavahi-client3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140472" comment="libavahi-common3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140473" comment="libavahi-common3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140474" comment="libavahi-core7-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140475" comment="libdns_sd-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140476" comment="libdns_sd-32bit-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140467" comment="avahi-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140468" comment="avahi-lang-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140469" comment="avahi-utils-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140470" comment="libavahi-client3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140472" comment="libavahi-common3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140474" comment="libavahi-core7-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140475" comment="libdns_sd-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140467" comment="avahi-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140468" comment="avahi-lang-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140470" comment="libavahi-client3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140471" comment="libavahi-client3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140472" comment="libavahi-common3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140473" comment="libavahi-common3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140474" comment="libavahi-core7-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140475" comment="libdns_sd-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140476" comment="libdns_sd-32bit-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141212" comment="avahi-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141213" comment="avahi-lang-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141214" comment="libavahi-client3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141215" comment="libavahi-client3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141216" comment="libavahi-common3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141217" comment="libavahi-common3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141218" comment="libavahi-core7-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141219" comment="libdns_sd-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141220" comment="libdns_sd-32bit-0.6.31-20.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141212" comment="avahi-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141213" comment="avahi-lang-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143136" comment="avahi-utils-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141214" comment="libavahi-client3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141215" comment="libavahi-client3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141216" comment="libavahi-common3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141217" comment="libavahi-common3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141218" comment="libavahi-core7-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141219" comment="libdns_sd-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141220" comment="libdns_sd-32bit-0.6.31-20.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144715" comment="avahi-compat-howl-devel-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144716" comment="avahi-compat-mDNSResponder-devel-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144717" comment="libavahi-devel-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144718" comment="libhowl0-0.6.31-20.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145201" comment="avahi-compat-howl-devel-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145202" comment="avahi-compat-mDNSResponder-devel-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145203" comment="libavahi-devel-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145204" comment="libhowl0-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145205" comment="python-avahi-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512711" comment="avahi-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512712" comment="avahi-lang-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512713" comment="avahi-utils-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512714" comment="libavahi-client3-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512715" comment="libavahi-client3-32bit-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512716" comment="libavahi-common3-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512717" comment="libavahi-common3-32bit-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512718" comment="libavahi-core7-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512719" comment="libdns_sd-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512720" comment="libdns_sd-32bit-0.6.32-32.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513910" comment="avahi-compat-howl-devel-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513911" comment="avahi-compat-mDNSResponder-devel-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513912" comment="libavahi-devel-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513913" comment="libhowl0-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513914" comment="python-avahi-0.6.32-32.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0771</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0771" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0771" ref_url="https://www.suse.com/security/cve/CVE-2009-0771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failures.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0771/">CVE-2009-0771</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0772</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0772" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0772" ref_url="https://www.suse.com/security/cve/CVE-2009-0772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0772/">CVE-2009-0772</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0773</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0773" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0773" ref_url="https://www.suse.com/security/cve/CVE-2009-0773" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some non-set elements," which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0773/">CVE-2009-0773</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0774</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0774" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0774" ref_url="https://www.suse.com/security/cve/CVE-2009-0774" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0774/">CVE-2009-0774</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0775</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0775" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0775" ref_url="https://www.suse.com/security/cve/CVE-2009-0775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properly handled during garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0775/">CVE-2009-0775</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0776</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0776" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0776" ref_url="https://www.suse.com/security/cve/CVE-2009-0776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0776/">CVE-2009-0776</cve>
	<bugzilla href="https://bugzilla.suse.com/465291">SUSE bug 465291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0777</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0777" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0777" ref_url="https://www.suse.com/security/cve/CVE-2009-0777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0777/">CVE-2009-0777</cve>
	<bugzilla href="https://bugzilla.suse.com/478625">SUSE bug 478625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0778</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0778" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0778" ref_url="https://www.suse.com/security/cve/CVE-2009-0778" source="SUSE CVE"/>
    <description>
    The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an "rt_cache leak."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0778/">CVE-2009-0778</cve>
	<bugzilla href="https://bugzilla.suse.com/482712">SUSE bug 482712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0781</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0781" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0781" ref_url="https://www.suse.com/security/cve/CVE-2009-0781" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0781/">CVE-2009-0781</cve>
	<bugzilla href="https://bugzilla.suse.com/507806">SUSE bug 507806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/509839">SUSE bug 509839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336154" comment="tomcat-servlet-3_1-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0783</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0783" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0783" ref_url="https://www.suse.com/security/cve/CVE-2009-0783" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2023-03-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2009-0783/">CVE-2009-0783</cve>
	<bugzilla href="https://bugzilla.suse.com/509839">SUSE bug 509839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/509840">SUSE bug 509840</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336154" comment="tomcat-servlet-3_1-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0787</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0787" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0787" ref_url="https://www.suse.com/security/cve/CVE-2009-0787" source="SUSE CVE"/>
    <description>
    The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0787/">CVE-2009-0787</cve>
	<bugzilla href="https://bugzilla.suse.com/487107">SUSE bug 487107</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0789</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0789" ref_url="https://www.suse.com/security/cve/CVE-2009-0789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0789/">CVE-2009-0789</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/489641">SUSE bug 489641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0790</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0790" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0790" ref_url="https://www.suse.com/security/cve/CVE-2009-0790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html" source="SUSE-SU"/>
    <description>
    The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0790/">CVE-2009-0790</cve>
	<bugzilla href="https://bugzilla.suse.com/487762">SUSE bug 487762</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110995" comment="strongswan-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110997" comment="strongswan-doc-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110998" comment="strongswan-hmac-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110999" comment="strongswan-ipsec-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009111000" comment="strongswan-libs0-5.1.3-18.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110995" comment="strongswan-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110997" comment="strongswan-doc-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110999" comment="strongswan-ipsec-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009111000" comment="strongswan-libs0-5.1.3-18.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119278" comment="strongswan-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119279" comment="strongswan-doc-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119280" comment="strongswan-ipsec-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119281" comment="strongswan-libs0-5.1.3-22.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119278" comment="strongswan-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119279" comment="strongswan-doc-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119300" comment="strongswan-hmac-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119280" comment="strongswan-ipsec-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119281" comment="strongswan-libs0-5.1.3-22.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141806" comment="strongswan-5.1.3-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141807" comment="strongswan-doc-5.1.3-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141808" comment="strongswan-ipsec-5.1.3-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141809" comment="strongswan-libs0-5.1.3-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156341" comment="strongswan-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156342" comment="strongswan-doc-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156343" comment="strongswan-ipsec-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156344" comment="strongswan-libs0-5.1.3-25.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156341" comment="strongswan-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156342" comment="strongswan-doc-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156345" comment="strongswan-hmac-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156343" comment="strongswan-ipsec-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156344" comment="strongswan-libs0-5.1.3-25.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009161786" comment="strongswan-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161787" comment="strongswan-doc-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161788" comment="strongswan-ipsec-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161789" comment="strongswan-libs0-5.1.3-26.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009161786" comment="strongswan-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161787" comment="strongswan-doc-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161803" comment="strongswan-hmac-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161788" comment="strongswan-ipsec-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161789" comment="strongswan-libs0-5.1.3-26.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0793</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0793" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0793" ref_url="https://www.suse.com/security/cve/CVE-2009-0793" source="SUSE CVE"/>
    <description>
    cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0793/">CVE-2009-0793</cve>
	<bugzilla href="https://bugzilla.suse.com/490610">SUSE bug 490610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/521512">SUSE bug 521512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/521513">SUSE bug 521513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141435" comment="lcms-1.19-17.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144882" comment="liblcms-devel-1.19-17.31 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147568" comment="liblcms1-1.19-17.28 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140713" comment="liblcms1-1.19-17.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140714" comment="liblcms1-32bit-1.19-17.31 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141435" comment="lcms-1.19-17.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140713" comment="liblcms1-1.19-17.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140714" comment="liblcms1-32bit-1.19-17.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0799</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0799" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0799" ref_url="https://www.suse.com/security/cve/CVE-2009-0799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0799/">CVE-2009-0799</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0800</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0800" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0800" ref_url="https://www.suse.com/security/cve/CVE-2009-0800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0800/">CVE-2009-0800</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0834</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0834" ref_url="https://www.suse.com/security/cve/CVE-2009-0834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0834/">CVE-2009-0834</cve>
	<bugzilla href="https://bugzilla.suse.com/483819">SUSE bug 483819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/483820">SUSE bug 483820</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0835</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0835" ref_url="https://www.suse.com/security/cve/CVE-2009-0835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
    <description>
    The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0835/">CVE-2009-0835</cve>
	<bugzilla href="https://bugzilla.suse.com/483819">SUSE bug 483819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/483820">SUSE bug 483820</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0844</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0844" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0844" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0844" ref_url="https://www.suse.com/security/cve/CVE-2009-0844" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00005.html" source="SUSE-SU"/>
    <description>
    The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0844/">CVE-2009-0844</cve>
	<bugzilla href="https://bugzilla.suse.com/486722">SUSE bug 486722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0845</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0845" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0845" ref_url="https://www.suse.com/security/cve/CVE-2009-0845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00005.html" source="SUSE-SU"/>
    <description>
    The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0845/">CVE-2009-0845</cve>
	<bugzilla href="https://bugzilla.suse.com/485894">SUSE bug 485894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/486722">SUSE bug 486722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0846</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0846" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0846" ref_url="https://www.suse.com/security/cve/CVE-2009-0846" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="TID7003100" ref_url="https://www.suse.com/support/kb/doc/?id=7003100" source="SUSE-SU"/>
    <description>
    The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0846/">CVE-2009-0846</cve>
	<bugzilla href="https://bugzilla.suse.com/486723">SUSE bug 486723</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0847</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0847" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0847" ref_url="https://www.suse.com/security/cve/CVE-2009-0847" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00005.html" source="SUSE-SU"/>
    <description>
    The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0847/">CVE-2009-0847</cve>
	<bugzilla href="https://bugzilla.suse.com/486722">SUSE bug 486722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0901</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0901" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0901" ref_url="https://www.suse.com/security/cve/CVE-2009-0901" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not prevent VariantClear calls on an uninitialized VARIANT, which allows remote attackers to execute arbitrary code via a malformed stream to an ATL (1) component or (2) control, related to ATL headers and error handling, aka "ATL Uninitialized Object Vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0901/">CVE-2009-0901</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0935</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0935" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0935" ref_url="https://www.suse.com/security/cve/CVE-2009-0935" source="SUSE CVE"/>
    <description>
    The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-08"/>
	<updated date="2023-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0935/">CVE-2009-0935</cve>
	<bugzilla href="https://bugzilla.suse.com/482843">SUSE bug 482843</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0945</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0945" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0945" ref_url="https://www.suse.com/security/cve/CVE-2009-0945" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0024-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00013.html" source="SUSE-SU"/>
    <description>
    Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0945/">CVE-2009-0945</cve>
	<bugzilla href="https://bugzilla.suse.com/512559">SUSE bug 512559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515124">SUSE bug 515124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/541632">SUSE bug 541632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/601349">SUSE bug 601349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/644114">SUSE bug 644114</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113422" comment="qt4-x11-tools-4.8.6-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113432" comment="libqt4-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113420" comment="libqt4-devel-doc-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113421" comment="libqt4-devel-doc-data-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113433" comment="libqt4-linguist-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113434" comment="libqt4-private-headers-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125285" comment="libqt4-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125286" comment="libqt4-devel-doc-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125287" comment="libqt4-devel-doc-data-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125288" comment="libqt4-linguist-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125289" comment="libqt4-private-headers-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141612" comment="libqt4-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141614" comment="libqt4-qt3support-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141616" comment="libqt4-sql-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141622" comment="libqt4-sql-sqlite-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141626" comment="libqt4-x11-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143250" comment="libqt4-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143251" comment="libqt4-qt3support-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143252" comment="libqt4-sql-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143253" comment="libqt4-sql-sqlite-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143254" comment="libqt4-x11-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143255" comment="qt4-x11-tools-4.8.6-2.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144917" comment="libqt4-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144918" comment="libqt4-devel-doc-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144919" comment="libqt4-devel-doc-data-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144920" comment="libqt4-linguist-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144921" comment="libqt4-private-headers-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513220" comment="qt4-x11-tools-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513819" comment="libqt4-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513820" comment="libqt4-devel-doc-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513821" comment="libqt4-devel-doc-data-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513822" comment="libqt4-linguist-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513823" comment="libqt4-private-headers-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0946</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-0946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-0946" ref_url="https://www.suse.com/security/cve/CVE-2009-0946" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0946/">CVE-2009-0946</cve>
	<bugzilla href="https://bugzilla.suse.com/485889">SUSE bug 485889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/496289">SUSE bug 496289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/541626">SUSE bug 541626</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1044</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1044" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1044" ref_url="https://www.suse.com/security/cve/CVE-2009-1044" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1044/">CVE-2009-1044</cve>
	<bugzilla href="https://bugzilla.suse.com/465291">SUSE bug 465291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/488955">SUSE bug 488955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1046</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1046" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1046" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1046" ref_url="https://www.suse.com/security/cve/CVE-2009-1046" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an "off-by-two memory error." NOTE: it is not clear whether this issue crosses privilege boundaries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1046/">CVE-2009-1046</cve>
	<bugzilla href="https://bugzilla.suse.com/478699">SUSE bug 478699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1072</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1072" ref_url="https://www.suse.com/security/cve/CVE-2009-1072" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00004.html" source="SUSE-SU"/>
    <description>
    nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1072/">CVE-2009-1072</cve>
	<bugzilla href="https://bugzilla.suse.com/487681">SUSE bug 487681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/497551">SUSE bug 497551</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1093</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1093" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1093" ref_url="https://www.suse.com/security/cve/CVE-2009-1093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-22"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1093/">CVE-2009-1093</cve>
	<bugzilla href="https://bugzilla.suse.com/488926">SUSE bug 488926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/497424">SUSE bug 497424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/516361">SUSE bug 516361</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1169</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1169" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1169" ref_url="https://www.suse.com/security/cve/CVE-2009-1169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1169/">CVE-2009-1169</cve>
	<bugzilla href="https://bugzilla.suse.com/488955">SUSE bug 488955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/509766">SUSE bug 509766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/510964">SUSE bug 510964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515951">SUSE bug 515951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1179</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1179" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1179" ref_url="https://www.suse.com/security/cve/CVE-2009-1179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1179/">CVE-2009-1179</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1180</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1180" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1180" ref_url="https://www.suse.com/security/cve/CVE-2009-1180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1180/">CVE-2009-1180</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1181</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1181" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1181" ref_url="https://www.suse.com/security/cve/CVE-2009-1181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1181/">CVE-2009-1181</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1182" ref_url="https://www.suse.com/security/cve/CVE-2009-1182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1182/">CVE-2009-1182</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1183</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1183" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1183" ref_url="https://www.suse.com/security/cve/CVE-2009-1183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1183/">CVE-2009-1183</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1185</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1185" ref_url="https://www.suse.com/security/cve/CVE-2009-1185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html" source="SUSE-SU"/>
    <description>
    udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1185/">CVE-2009-1185</cve>
	<bugzilla href="https://bugzilla.suse.com/1034330">SUSE bug 1034330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/493158">SUSE bug 493158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550249">SUSE bug 550249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/776925">SUSE bug 776925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1187</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1187" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1187" ref_url="https://www.suse.com/security/cve/CVE-2009-1187" source="SUSE CVE"/>
    <description>
    Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1187/">CVE-2009-1187</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/508153">SUSE bug 508153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/508154">SUSE bug 508154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539875">SUSE bug 539875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566697">SUSE bug 566697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1188</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1188" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1188" ref_url="https://www.suse.com/security/cve/CVE-2009-1188" source="SUSE CVE"/>
    <description>
    Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1188/">CVE-2009-1188</cve>
	<bugzilla href="https://bugzilla.suse.com/487100">SUSE bug 487100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/508153">SUSE bug 508153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/508154">SUSE bug 508154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539875">SUSE bug 539875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546400">SUSE bug 546400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566697">SUSE bug 566697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1191</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1191" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1191" ref_url="https://www.suse.com/security/cve/CVE-2009-1191" source="SUSE CVE"/>
    <description>
    mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1191/">CVE-2009-1191</cve>
	<bugzilla href="https://bugzilla.suse.com/521943">SUSE bug 521943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539571">SUSE bug 539571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1192</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1192" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1192" ref_url="https://www.suse.com/security/cve/CVE-2009-1192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:055" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1192/">CVE-2009-1192</cve>
	<bugzilla href="https://bugzilla.suse.com/497159">SUSE bug 497159</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1195</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1195" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1195" ref_url="https://www.suse.com/security/cve/CVE-2009-1195" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1195/">CVE-2009-1195</cve>
	<bugzilla href="https://bugzilla.suse.com/512583">SUSE bug 512583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/513080">SUSE bug 513080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539571">SUSE bug 539571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1210</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1210" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1210" ref_url="https://www.suse.com/security/cve/CVE-2009-1210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1210/">CVE-2009-1210</cve>
	<bugzilla href="https://bugzilla.suse.com/491449">SUSE bug 491449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/493584">SUSE bug 493584</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1242</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1242" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1242" ref_url="https://www.suse.com/security/cve/CVE-2009-1242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html" source="SUSE-SU"/>
    <description>
    The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka "Long mode enable") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1242/">CVE-2009-1242</cve>
	<bugzilla href="https://bugzilla.suse.com/492760">SUSE bug 492760</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1252</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1252" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1252" ref_url="https://www.suse.com/security/cve/CVE-2009-1252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1252/">CVE-2009-1252</cve>
	<bugzilla href="https://bugzilla.suse.com/501632">SUSE bug 501632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128799" comment="ntp-4.2.8p8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128800" comment="ntp-doc-4.2.8p8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141758" comment="ntp-4.2.6p5-24.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141759" comment="ntp-doc-4.2.6p5-24.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142039" comment="ntp-4.2.8p4-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142040" comment="ntp-doc-4.2.8p4-1.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159252" comment="ntp-4.2.8p10-63.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159253" comment="ntp-doc-4.2.8p10-63.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512577" comment="ntp-4.2.8p12-64.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512578" comment="ntp-doc-4.2.8p12-64.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513331" comment="ntp-4.2.8p13-85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513332" comment="ntp-doc-4.2.8p13-85.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1255</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1255" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1255" ref_url="https://www.suse.com/security/cve/CVE-2009-1255" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon's TCP port.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1255/">CVE-2009-1255</cve>
	<bugzilla href="https://bugzilla.suse.com/501656">SUSE bug 501656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334534" comment="memcached is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1267</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1267" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1267" ref_url="https://www.suse.com/security/cve/CVE-2009-1267" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause a denial of service (crash) via unknown attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1267/">CVE-2009-1267</cve>
	<bugzilla href="https://bugzilla.suse.com/493584">SUSE bug 493584</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1268</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1268" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1268" ref_url="https://www.suse.com/security/cve/CVE-2009-1268" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1268/">CVE-2009-1268</cve>
	<bugzilla href="https://bugzilla.suse.com/493584">SUSE bug 493584</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1269</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1269" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1269" ref_url="https://www.suse.com/security/cve/CVE-2009-1269" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1269/">CVE-2009-1269</cve>
	<bugzilla href="https://bugzilla.suse.com/493584">SUSE bug 493584</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1273</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1273" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1273" ref_url="https://www.suse.com/security/cve/CVE-2009-1273" source="SUSE CVE"/>
    <description>
    pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1273/">CVE-2009-1273</cve>
	<bugzilla href="https://bugzilla.suse.com/492764">SUSE bug 492764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/507729">SUSE bug 507729</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147602" comment="pam_ssh-2.0-1.39 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141063" comment="pam_ssh-2.0-1.40 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141064" comment="pam_ssh-32bit-2.0-1.40 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1302</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1302" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1302" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1302" ref_url="https://www.suse.com/security/cve/CVE-2009-1302" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1302/">CVE-2009-1302</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1303</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1303" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1303" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1303" ref_url="https://www.suse.com/security/cve/CVE-2009-1303" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1303/">CVE-2009-1303</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1304</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1304" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1304" ref_url="https://www.suse.com/security/cve/CVE-2009-1304" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1304/">CVE-2009-1304</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1305</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1305" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1305" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1305" ref_url="https://www.suse.com/security/cve/CVE-2009-1305" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1305/">CVE-2009-1305</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1306</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1306" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1306" ref_url="https://www.suse.com/security/cve/CVE-2009-1306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1306/">CVE-2009-1306</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1307</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1307" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1307" ref_url="https://www.suse.com/security/cve/CVE-2009-1307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1307/">CVE-2009-1307</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515951">SUSE bug 515951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1308</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1308" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1308" ref_url="https://www.suse.com/security/cve/CVE-2009-1308" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1308/">CVE-2009-1308</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1309</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1309" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1309" ref_url="https://www.suse.com/security/cve/CVE-2009-1309" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1309/">CVE-2009-1309</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1310</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1310" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1310" ref_url="https://www.suse.com/security/cve/CVE-2009-1310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1310/">CVE-2009-1310</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1311</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1311" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1311" ref_url="https://www.suse.com/security/cve/CVE-2009-1311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1311/">CVE-2009-1311</cve>
	<bugzilla href="https://bugzilla.suse.com/465291">SUSE bug 465291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515951">SUSE bug 515951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1312</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1312" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1312" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1312" ref_url="https://www.suse.com/security/cve/CVE-2009-1312" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1312/">CVE-2009-1312</cve>
	<bugzilla href="https://bugzilla.suse.com/495473">SUSE bug 495473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1313</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1313" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1313" ref_url="https://www.suse.com/security/cve/CVE-2009-1313" source="SUSE CVE"/>
    <description>
    The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1313/">CVE-2009-1313</cve>
	<bugzilla href="https://bugzilla.suse.com/500909">SUSE bug 500909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/502062">SUSE bug 502062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1336</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1336" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1336" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1336" ref_url="https://www.suse.com/security/cve/CVE-2009-1336" source="SUSE CVE"/>
    <description>
    fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1336/">CVE-2009-1336</cve>
	<bugzilla href="https://bugzilla.suse.com/492766">SUSE bug 492766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1337</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1337" ref_url="https://www.suse.com/security/cve/CVE-2009-1337" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00004.html" source="SUSE-SU"/>
    <description>
    The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1337/">CVE-2009-1337</cve>
	<bugzilla href="https://bugzilla.suse.com/1171985">SUSE bug 1171985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/492768">SUSE bug 492768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1364</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1364" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1364" ref_url="https://www.suse.com/security/cve/CVE-2009-1364" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-September/001569.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1134-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1364/">CVE-2009-1364</cve>
	<bugzilla href="https://bugzilla.suse.com/495842">SUSE bug 495842</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514965" comment="libwmf-0_2-7-0.2.8.4-242.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792109" comment="libwmf-0_2-7-0.2.8.4-242.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009539719" comment="libwmf-0_2-7-0.2.8.4-242.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539720" comment="libwmf-devel-0.2.8.4-242.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539721" comment="libwmf-gnome-0.2.8.4-242.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792109" comment="libwmf-0_2-7-0.2.8.4-242.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792110" comment="libwmf-devel-0.2.8.4-242.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792111" comment="libwmf-gnome-0.2.8.4-242.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792112" comment="libwmf-tools-0.2.8.4-242.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1377</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1377" ref_url="https://www.suse.com/security/cve/CVE-2009-1377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1377/">CVE-2009-1377</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/504687">SUSE bug 504687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1378</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1378" ref_url="https://www.suse.com/security/cve/CVE-2009-1378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1378/">CVE-2009-1378</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/504687">SUSE bug 504687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1379</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1379" ref_url="https://www.suse.com/security/cve/CVE-2009-1379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1379/">CVE-2009-1379</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/504687">SUSE bug 504687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1384</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1384" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1384" ref_url="https://www.suse.com/security/cve/CVE-2009-1384" source="SUSE CVE"/>
    <description>
    pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1384/">CVE-2009-1384</cve>
	<bugzilla href="https://bugzilla.suse.com/507729">SUSE bug 507729</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147601" comment="pam_krb5-2.4.4-4.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141061" comment="pam_krb5-2.4.4-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141062" comment="pam_krb5-32bit-2.4.4-4.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1385</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1385" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1385" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1385" ref_url="https://www.suse.com/security/cve/CVE-2009-1385" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1385/">CVE-2009-1385</cve>
	<bugzilla href="https://bugzilla.suse.com/509822">SUSE bug 509822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/567678">SUSE bug 567678</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1386</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1386" ref_url="https://www.suse.com/security/cve/CVE-2009-1386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1386/">CVE-2009-1386</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/509031">SUSE bug 509031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515659">SUSE bug 515659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1387</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1387" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1387" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1387" ref_url="https://www.suse.com/security/cve/CVE-2009-1387" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1387/">CVE-2009-1387</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/509031">SUSE bug 509031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515659">SUSE bug 515659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1389</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1389" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1389" ref_url="https://www.suse.com/security/cve/CVE-2009-1389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1389/">CVE-2009-1389</cve>
	<bugzilla href="https://bugzilla.suse.com/511243">SUSE bug 511243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/567678">SUSE bug 567678</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1415</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1415" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1415" ref_url="https://www.suse.com/security/cve/CVE-2009-1415" source="SUSE CVE"/>
    <description>
    lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a malformed DSA key that triggers a (1) free of an uninitialized pointer or (2) double free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1415/">CVE-2009-1415</cve>
	<bugzilla href="https://bugzilla.suse.com/497886">SUSE bug 497886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/505494">SUSE bug 505494</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333974" comment="gnutls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335156" comment="libgnutls28 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335155" comment="libgnutls28-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333974" comment="gnutls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335157" comment="libgnutls-openssl27 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335156" comment="libgnutls28 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335155" comment="libgnutls28-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335158" comment="libgnutls-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335159" comment="libgnutls-openssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335160" comment="libgnutlsxx-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335161" comment="libgnutlsxx28 is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1439</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1439" ref_url="https://www.suse.com/security/cve/CVE-2009-1439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-17"/>
	<updated date="2023-05-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1439/">CVE-2009-1439</cve>
	<bugzilla href="https://bugzilla.suse.com/492282">SUSE bug 492282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/498824">SUSE bug 498824</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1494</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1494" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1494" ref_url="https://www.suse.com/security/cve/CVE-2009-1494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    The process_stat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1494/">CVE-2009-1494</cve>
	<bugzilla href="https://bugzilla.suse.com/501656">SUSE bug 501656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159251" comment="memcached-1.4.33-3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174459" comment="memcached-1.4.39-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334021" comment="memcached is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513855" comment="memcached-devel-1.4.39-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1563</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1563" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1563" ref_url="https://www.suse.com/security/cve/CVE-2009-1563" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0689.  Reason: This candidate is a duplicate of CVE-2009-0689.  Certain codebase relationships were not originally clear.  Notes: All CVE users should reference CVE-2009-0689 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1563/">CVE-2009-1563</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546371">SUSE bug 546371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557126">SUSE bug 557126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557127">SUSE bug 557127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557128">SUSE bug 557128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557671">SUSE bug 557671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1630</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1630" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1630" ref_url="https://www.suse.com/security/cve/CVE-2009-1630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1630/">CVE-2009-1630</cve>
	<bugzilla href="https://bugzilla.suse.com/1175689">SUSE bug 1175689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/503353">SUSE bug 503353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1633</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1633" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1633" ref_url="https://www.suse.com/security/cve/CVE-2009-1633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-19"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1633/">CVE-2009-1633</cve>
	<bugzilla href="https://bugzilla.suse.com/492282">SUSE bug 492282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1720</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1720" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1720" ref_url="https://www.suse.com/security/cve/CVE-2009-1720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1720/">CVE-2009-1720</cve>
	<bugzilla href="https://bugzilla.suse.com/527538">SUSE bug 527538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/527539">SUSE bug 527539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141436" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-4.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144976" comment="openexr-devel-2.1.0-4.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172642" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-6.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172662" comment="openexr-devel-2.1.0-6.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514231" comment="openexr-devel-2.1.0-6.13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514296" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-6.13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140719" comment="libIlmImf-Imf_2_1-21-2.1.0-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140720" comment="openexr-2.1.0-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140719" comment="libIlmImf-Imf_2_1-21-2.1.0-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141436" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140720" comment="openexr-2.1.0-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147541" comment="libIlmImf-Imf_2_1-21-2.1.0-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147542" comment="openexr-2.1.0-4.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009172641" comment="libIlmImf-Imf_2_1-21-2.1.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172642" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172643" comment="openexr-2.1.0-6.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009172641" comment="libIlmImf-Imf_2_1-21-2.1.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172643" comment="openexr-2.1.0-6.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512992" comment="libIlmImf-Imf_2_1-21-2.1.0-6.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512993" comment="openexr-2.1.0-6.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1721</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1721" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1721" ref_url="https://www.suse.com/security/cve/CVE-2009-1721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1721/">CVE-2009-1721</cve>
	<bugzilla href="https://bugzilla.suse.com/527538">SUSE bug 527538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/527539">SUSE bug 527539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141436" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-4.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144976" comment="openexr-devel-2.1.0-4.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172642" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-6.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172662" comment="openexr-devel-2.1.0-6.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514231" comment="openexr-devel-2.1.0-6.13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514296" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-6.13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140719" comment="libIlmImf-Imf_2_1-21-2.1.0-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140720" comment="openexr-2.1.0-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140719" comment="libIlmImf-Imf_2_1-21-2.1.0-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141436" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140720" comment="openexr-2.1.0-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147541" comment="libIlmImf-Imf_2_1-21-2.1.0-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147542" comment="openexr-2.1.0-4.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009172641" comment="libIlmImf-Imf_2_1-21-2.1.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172642" comment="libIlmImf-Imf_2_1-21-32bit-2.1.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172643" comment="openexr-2.1.0-6.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009172641" comment="libIlmImf-Imf_2_1-21-2.1.0-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172643" comment="openexr-2.1.0-6.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512992" comment="libIlmImf-Imf_2_1-21-2.1.0-6.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512993" comment="openexr-2.1.0-6.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1862</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1862" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1862" ref_url="https://www.suse.com/security/cve/CVE-2009-1862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1862/">CVE-2009-1862</cve>
	<bugzilla href="https://bugzilla.suse.com/524508">SUSE bug 524508</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1863</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1863" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1863" ref_url="https://www.suse.com/security/cve/CVE-2009-1863" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a "privilege escalation vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1863/">CVE-2009-1863</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1864</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1864" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1864" ref_url="https://www.suse.com/security/cve/CVE-2009-1864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1864/">CVE-2009-1864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1865</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1865" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1865" ref_url="https://www.suse.com/security/cve/CVE-2009-1865" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1865/">CVE-2009-1865</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1866</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1866" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1866" ref_url="https://www.suse.com/security/cve/CVE-2009-1866" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1866/">CVE-2009-1866</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1867</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1867" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1867" ref_url="https://www.suse.com/security/cve/CVE-2009-1867" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "clickjacking vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1867/">CVE-2009-1867</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1868</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1868" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1868" ref_url="https://www.suse.com/security/cve/CVE-2009-1868" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1868/">CVE-2009-1868</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1869</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1869" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1869" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1869" ref_url="https://www.suse.com/security/cve/CVE-2009-1869" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1869/">CVE-2009-1869</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1870</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1870" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1870" ref_url="https://www.suse.com/security/cve/CVE-2009-1870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local sandbox vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1870/">CVE-2009-1870</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1883</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1883" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1883" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1883" ref_url="https://www.suse.com/security/cve/CVE-2009-1883" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1883/">CVE-2009-1883</cve>
	<bugzilla href="https://bugzilla.suse.com/539879">SUSE bug 539879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1885</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1885" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1885" ref_url="https://www.suse.com/security/cve/CVE-2009-1885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1885/">CVE-2009-1885</cve>
	<bugzilla href="https://bugzilla.suse.com/530708">SUSE bug 530708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108094" comment="libxerces-c-devel-3.1.1-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131022" comment="libxerces-c-3_1-3.1.1-12.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131754" comment="libxerces-c-devel-3.1.1-12.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108092" comment="libxerces-c-3_1-3.1.1-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108093" comment="libxerces-c-3_1-32bit-3.1.1-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131022" comment="libxerces-c-3_1-3.1.1-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131023" comment="libxerces-c-3_1-32bit-3.1.1-12.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141747" comment="libxerces-c-3_1-3.1.1-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141748" comment="libxerces-c-3_1-32bit-3.1.1-1.6 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1886</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1886" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1886" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1886" ref_url="https://www.suse.com/security/cve/CVE-2009-1886" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-1886/">CVE-2009-1886</cve>
	<bugzilla href="https://bugzilla.suse.com/513360">SUSE bug 513360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515479">SUSE bug 515479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141234" comment="cifs-utils-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141851" comment="cifs-utils-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144723" comment="cifs-utils-devel-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145019" comment="cifs-utils-devel-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512063" comment="cifs-utils-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512759" comment="cifs-utils-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513638" comment="cifs-utils-devel-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513927" comment="cifs-utils-devel-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1888</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1888" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1888" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1888" ref_url="https://www.suse.com/security/cve/CVE-2009-1888" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00003.html" source="SUSE-SU"/>
    <description>
    The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-08"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1888/">CVE-2009-1888</cve>
	<bugzilla href="https://bugzilla.suse.com/513360">SUSE bug 513360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/515479">SUSE bug 515479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141234" comment="cifs-utils-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141851" comment="cifs-utils-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144723" comment="cifs-utils-devel-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145019" comment="cifs-utils-devel-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512063" comment="cifs-utils-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512759" comment="cifs-utils-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513638" comment="cifs-utils-devel-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513927" comment="cifs-utils-devel-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1890</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1890" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1890" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1890" ref_url="https://www.suse.com/security/cve/CVE-2009-1890" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1890/">CVE-2009-1890</cve>
	<bugzilla href="https://bugzilla.suse.com/519194">SUSE bug 519194</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1891</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1891" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1891" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1891" ref_url="https://www.suse.com/security/cve/CVE-2009-1891" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1891/">CVE-2009-1891</cve>
	<bugzilla href="https://bugzilla.suse.com/521906">SUSE bug 521906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1892</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1892" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1892" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1892" ref_url="https://www.suse.com/security/cve/CVE-2009-1892" source="SUSE CVE"/>
    <description>
    dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1892/">CVE-2009-1892</cve>
	<bugzilla href="https://bugzilla.suse.com/519413">SUSE bug 519413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1895</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1895" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1895" ref_url="https://www.suse.com/security/cve/CVE-2009-1895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
    <description>
    The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1895/">CVE-2009-1895</cve>
	<bugzilla href="https://bugzilla.suse.com/521427">SUSE bug 521427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1955</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1955" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1955" ref_url="https://www.suse.com/security/cve/CVE-2009-1955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
    <description>
    The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1955/">CVE-2009-1955</cve>
	<bugzilla href="https://bugzilla.suse.com/509825">SUSE bug 509825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/510301">SUSE bug 510301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/529591">SUSE bug 529591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992541">SUSE bug 992541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1956</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1956" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1956" ref_url="https://www.suse.com/security/cve/CVE-2009-1956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1956/">CVE-2009-1956</cve>
	<bugzilla href="https://bugzilla.suse.com/510301">SUSE bug 510301</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1961</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1961" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1961" ref_url="https://www.suse.com/security/cve/CVE-2009-1961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html" source="SUSE-SU"/>
    <description>
    The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-1961/">CVE-2009-1961</cve>
	<bugzilla href="https://bugzilla.suse.com/495065">SUSE bug 495065</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1962</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-1962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1962" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-1962" ref_url="https://www.suse.com/security/cve/CVE-2009-1962" source="SUSE CVE"/>
    <description>
    Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary files, where [PID] is a process ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1962/">CVE-2009-1962</cve>
	<bugzilla href="https://bugzilla.suse.com/510839">SUSE bug 510839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145002" comment="xfig-3.2.5c-2.8 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2285</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2285" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2285" ref_url="https://www.suse.com/security/cve/CVE-2009-2285" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2285/">CVE-2009-2285</cve>
	<bugzilla href="https://bugzilla.suse.com/518698">SUSE bug 518698</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2347</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2347" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2347" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2347" ref_url="https://www.suse.com/security/cve/CVE-2009-2347" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2347/">CVE-2009-2347</cve>
	<bugzilla href="https://bugzilla.suse.com/519796">SUSE bug 519796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/616827">SUSE bug 616827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2395</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2395" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2395" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2395" ref_url="https://www.suse.com/security/cve/CVE-2009-2395" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
    <description>
    SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2395/">CVE-2009-2395</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2406</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2406" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2406" ref_url="https://www.suse.com/security/cve/CVE-2009-2406" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-11"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2406/">CVE-2009-2406</cve>
	<bugzilla href="https://bugzilla.suse.com/523719">SUSE bug 523719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2407</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2407" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2407" ref_url="https://www.suse.com/security/cve/CVE-2009-2407" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2407/">CVE-2009-2407</cve>
	<bugzilla href="https://bugzilla.suse.com/523719">SUSE bug 523719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2411</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2411" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2411" ref_url="https://www.suse.com/security/cve/CVE-2009-2411" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2411/">CVE-2009-2411</cve>
	<bugzilla href="https://bugzilla.suse.com/528714">SUSE bug 528714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802057">SUSE bug 802057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2412</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2412" ref_url="https://www.suse.com/security/cve/CVE-2009-2412" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2412/">CVE-2009-2412</cve>
	<bugzilla href="https://bugzilla.suse.com/528714">SUSE bug 528714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/529591">SUSE bug 529591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802057">SUSE bug 802057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147559" comment="libapr-util1-1.5.3-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147560" comment="libapr-util1-dbd-sqlite3-1.5.3-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147561" comment="libapr1-1.5.1-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144807" comment="libapr1-devel-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144807" comment="libapr1-devel-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144807" comment="libapr1-devel-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144807" comment="libapr1-devel-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513018" comment="libapr-util1-dbd-sqlite3-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513019" comment="libapr1-1.5.1-4.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168393" comment="libapr-util1-dbd-sqlite3-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175410" comment="libapr1-1.5.1-4.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168432" comment="libapr-util1-devel-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175410" comment="libapr1-1.5.1-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175411" comment="libapr1-devel-1.5.1-4.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514040" comment="libapr-util1-devel-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513019" comment="libapr1-1.5.1-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514041" comment="libapr1-devel-1.5.1-4.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2417</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2417" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2417" ref_url="https://www.suse.com/security/cve/CVE-2009-2417" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
    <description>
    lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2417/">CVE-2009-2417</cve>
	<bugzilla href="https://bugzilla.suse.com/527990">SUSE bug 527990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/528372">SUSE bug 528372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131794" comment="libcurl-devel-7.37.0-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144822" comment="libcurl-devel-7.37.0-2.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154450" comment="libcurl-devel-7.37.0-36.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513722" comment="libcurl-devel-7.60.0-2.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514059" comment="libcurl-devel-7.60.0-9.8 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110171" comment="libcurl4-32bit-7.37.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131101" comment="curl-7.37.0-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131102" comment="libcurl4-7.37.0-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131103" comment="libcurl4-32bit-7.37.0-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131101" comment="curl-7.37.0-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131102" comment="libcurl4-7.37.0-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141289" comment="curl-7.37.0-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141290" comment="libcurl4-7.37.0-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141291" comment="libcurl4-32bit-7.37.0-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154400" comment="curl-7.37.0-36.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154401" comment="libcurl4-7.37.0-36.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154402" comment="libcurl4-32bit-7.37.0-36.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512093" comment="curl-7.60.0-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512094" comment="libcurl4-7.60.0-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512095" comment="libcurl4-32bit-7.60.0-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512783" comment="curl-7.60.0-9.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512784" comment="libcurl4-7.60.0-9.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512785" comment="libcurl4-32bit-7.60.0-9.8 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2470</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2470" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2470" ref_url="https://www.suse.com/security/cve/CVE-2009-2470" source="SUSE CVE"/>
    <description>
    Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2470/">CVE-2009-2470</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2473</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2473" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2473" ref_url="https://www.suse.com/security/cve/CVE-2009-2473" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
    <description>
    neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2473/">CVE-2009-2473</cve>
	<bugzilla href="https://bugzilla.suse.com/528370">SUSE bug 528370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/532345">SUSE bug 532345</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140887" comment="libneon27-0.30.0-3.65 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144891" comment="libneon-devel-0.30.0-3.65 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147573" comment="libneon27-0.30.0-3.64 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140887" comment="libneon27-0.30.0-3.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140888" comment="libneon27-32bit-0.30.0-3.65 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2474</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2474" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2474" ref_url="https://www.suse.com/security/cve/CVE-2009-2474" source="SUSE CVE"/>
    <description>
    neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2474/">CVE-2009-2474</cve>
	<bugzilla href="https://bugzilla.suse.com/528370">SUSE bug 528370</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140887" comment="libneon27-0.30.0-3.65 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144891" comment="libneon-devel-0.30.0-3.65 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147573" comment="libneon27-0.30.0-3.64 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140887" comment="libneon27-0.30.0-3.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140888" comment="libneon27-32bit-0.30.0-3.65 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2493</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2493" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2493" ref_url="https://www.suse.com/security/cve/CVE-2009-2493" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00001.html" source="SUSE-SU"/>
    <description>
    The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly restrict use of OleLoadFromStream in instantiating objects from data streams, which allows remote attackers to execute arbitrary code via a crafted HTML document with an ATL (1) component or (2) control, related to ATL headers and bypassing security policies, aka "ATL COM Initialization Vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2493/">CVE-2009-2493</cve>
	<bugzilla href="https://bugzilla.suse.com/548655">SUSE bug 548655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/558653">SUSE bug 558653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/564513">SUSE bug 564513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566705">SUSE bug 566705</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2624</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2624" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2624" ref_url="https://www.suse.com/security/cve/CVE-2009-2624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html" source="SUSE-SU"/>
    <description>
    The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service (application crash or infinite loop) or possibly execute arbitrary code via a crafted archive.  NOTE: this issue is caused by a CVE-2006-4334 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2624/">CVE-2009-2624</cve>
	<bugzilla href="https://bugzilla.suse.com/570331">SUSE bug 570331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/588113">SUSE bug 588113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140677" comment="gzip-1.6-7.392 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147533" comment="gzip-1.6-7.209 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512188" comment="gzip-1.6-9.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512946" comment="gzip-1.10-2.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2625</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2625" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2625" ref_url="https://www.suse.com/security/cve/CVE-2009-2625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00014.html" source="SUSE-SU"/>
    <description>
    XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2625/">CVE-2009-2625</cve>
	<bugzilla href="https://bugzilla.suse.com/525562">SUSE bug 525562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/530717">SUSE bug 530717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/534025">SUSE bug 534025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/534721">SUSE bug 534721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/537969">SUSE bug 537969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/540945">SUSE bug 540945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/548655">SUSE bug 548655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550664">SUSE bug 550664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/553220">SUSE bug 553220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/558892">SUSE bug 558892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581162">SUSE bug 581162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581765">SUSE bug 581765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/610080">SUSE bug 610080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/611931">SUSE bug 611931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/611932">SUSE bug 611932</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128469" comment="libexpat-devel-2.1.0-17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144855" comment="libexpat-devel-2.1.0-13.232 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148248" comment="libexpat-devel-2.1.0-20.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162539" comment="libexpat-devel-2.1.0-21.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514062" comment="libexpat-devel-2.1.0-21.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128466" comment="libexpat1-32bit-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148243" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148244" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148245" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2654</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2654" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2654" ref_url="https://www.suse.com/security/cve/CVE-2009-2654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2654/">CVE-2009-2654</cve>
	<bugzilla href="https://bugzilla.suse.com/527489">SUSE bug 527489</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2666</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2666" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2666" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2666" ref_url="https://www.suse.com/security/cve/CVE-2009-2666" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00006.html" source="SUSE-SU"/>
    <description>
    socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2666/">CVE-2009-2666</cve>
	<bugzilla href="https://bugzilla.suse.com/528746">SUSE bug 528746</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140570" comment="fetchmailconf-6.3.26-12.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150270" comment="fetchmailconf-6.3.26-5.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143172" comment="fetchmail-6.3.26-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143173" comment="fetchmailconf-6.3.26-5.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2691</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2691" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2691" ref_url="https://www.suse.com/security/cve/CVE-2009-2691" source="SUSE CVE"/>
    <description>
    The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-17"/>
	<updated date="2023-05-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2691/">CVE-2009-2691</cve>
	<bugzilla href="https://bugzilla.suse.com/529919">SUSE bug 529919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2694</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2694" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2694" ref_url="https://www.suse.com/security/cve/CVE-2009-2694" source="SUSE CVE"/>
    <description>
    The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-06"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2694/">CVE-2009-2694</cve>
	<bugzilla href="https://bugzilla.suse.com/527100">SUSE bug 527100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2698</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2698" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2698" ref_url="https://www.suse.com/security/cve/CVE-2009-2698" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html" source="SUSE-SU"/>
    <description>
    The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-23"/>
	<updated date="2023-05-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2698/">CVE-2009-2698</cve>
	<bugzilla href="https://bugzilla.suse.com/532338">SUSE bug 532338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2699</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2699" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2699" ref_url="https://www.suse.com/security/cve/CVE-2009-2699" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003365.html" source="SUSE-SU"/>
    <description>
    The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2699/">CVE-2009-2699</cve>
	<bugzilla href="https://bugzilla.suse.com/1078450">SUSE bug 1078450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2703</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2703" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2703" ref_url="https://www.suse.com/security/cve/CVE-2009-2703" source="SUSE CVE"/>
    <description>
    libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2703/">CVE-2009-2703</cve>
	<bugzilla href="https://bugzilla.suse.com/537214">SUSE bug 537214</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2767" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2767" ref_url="https://www.suse.com/security/cve/CVE-2009-2767" source="SUSE CVE"/>
    <description>
    The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2767/">CVE-2009-2767</cve>
	<bugzilla href="https://bugzilla.suse.com/529555">SUSE bug 529555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2813</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2813" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2813" ref_url="https://www.suse.com/security/cve/CVE-2009-2813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html" source="SUSE-SU"/>
    <description>
    Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2813/">CVE-2009-2813</cve>
	<bugzilla href="https://bugzilla.suse.com/515479">SUSE bug 515479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539517">SUSE bug 539517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/543115">SUSE bug 543115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141234" comment="cifs-utils-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141851" comment="cifs-utils-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144723" comment="cifs-utils-devel-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145019" comment="cifs-utils-devel-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512063" comment="cifs-utils-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512759" comment="cifs-utils-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513638" comment="cifs-utils-devel-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513927" comment="cifs-utils-devel-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2820</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2820" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2820" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2820" ref_url="https://www.suse.com/security/cve/CVE-2009-2820" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2820/">CVE-2009-2820</cve>
	<bugzilla href="https://bugzilla.suse.com/548317">SUSE bug 548317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/551563">SUSE bug 551563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/574336">SUSE bug 574336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144726" comment="cups-devel-1.7.5-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141281" comment="cups-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141282" comment="cups-client-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141283" comment="cups-libs-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141284" comment="cups-libs-32bit-1.7.5-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147501" comment="cups154-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147502" comment="cups154-client-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147503" comment="cups154-filters-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147504" comment="cups154-libs-1.5.4-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513929" comment="cups-ddk-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513930" comment="cups-devel-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2848</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2848" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2848" ref_url="https://www.suse.com/security/cve/CVE-2009-2848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-&gt;clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2848/">CVE-2009-2848</cve>
	<bugzilla href="https://bugzilla.suse.com/527865">SUSE bug 527865</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2903</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2903" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2903" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2903" ref_url="https://www.suse.com/security/cve/CVE-2009-2903" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2903/">CVE-2009-2903</cve>
	<bugzilla href="https://bugzilla.suse.com/539878">SUSE bug 539878</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2905</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2905" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2905" ref_url="https://www.suse.com/security/cve/CVE-2009-2905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2905/">CVE-2009-2905</cve>
	<bugzilla href="https://bugzilla.suse.com/540930">SUSE bug 540930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142140" comment="libnewt0_52-0.52.16-1.83 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144972" comment="newt-devel-0.52.16-1.83 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144973" comment="newt-static-0.52.16-1.83 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2906</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2906" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2906" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2906" ref_url="https://www.suse.com/security/cve/CVE-2009-2906" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html" source="SUSE-SU"/>
    <description>
    smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-2906/">CVE-2009-2906</cve>
	<bugzilla href="https://bugzilla.suse.com/515479">SUSE bug 515479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/543115">SUSE bug 543115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141234" comment="cifs-utils-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141851" comment="cifs-utils-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144723" comment="cifs-utils-devel-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145019" comment="cifs-utils-devel-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512063" comment="cifs-utils-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512759" comment="cifs-utils-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513638" comment="cifs-utils-devel-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513927" comment="cifs-utils-devel-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2908</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2908" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2908" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2908" ref_url="https://www.suse.com/security/cve/CVE-2009-2908" source="SUSE CVE"/>
    <description>
    The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2908/">CVE-2009-2908</cve>
	<bugzilla href="https://bugzilla.suse.com/545274">SUSE bug 545274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2910</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2910" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2910" ref_url="https://www.suse.com/security/cve/CVE-2009-2910" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:055" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-2910/">CVE-2009-2910</cve>
	<bugzilla href="https://bugzilla.suse.com/1175785">SUSE bug 1175785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/543740">SUSE bug 543740</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2911</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2911" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2911" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2911" ref_url="https://www.suse.com/security/cve/CVE-2009-2911" source="SUSE CVE"/>
    <description>
    SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-2911/">CVE-2009-2911</cve>
	<bugzilla href="https://bugzilla.suse.com/548361">SUSE bug 548361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/574243">SUSE bug 574243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144994" comment="systemtap-sdt-devel-2.5-1.55 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145186" comment="systemtap-sdt-devel-2.5-4.44 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145368" comment="systemtap-sdt-devel-3.0-7.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159840" comment="systemtap-sdt-devel-3.0-10.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513883" comment="systemtap-sdt-devel-3.0-15.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514253" comment="systemtap-sdt-devel-3.0-20.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141135" comment="systemtap-3.0-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141136" comment="systemtap-runtime-3.0-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141137" comment="systemtap-server-3.0-7.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143298" comment="systemtap-2.5-1.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143299" comment="systemtap-runtime-2.5-1.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143300" comment="systemtap-server-2.5-1.55 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143397" comment="systemtap-2.5-4.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143398" comment="systemtap-runtime-2.5-4.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143399" comment="systemtap-server-2.5-4.44 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159309" comment="systemtap-3.0-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159310" comment="systemtap-runtime-3.0-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159311" comment="systemtap-server-3.0-10.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513422" comment="systemtap-3.0-20.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513423" comment="systemtap-runtime-3.0-20.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513424" comment="systemtap-server-3.0-20.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513592" comment="systemtap-3.0-15.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513593" comment="systemtap-runtime-3.0-15.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513594" comment="systemtap-server-3.0-15.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2948</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-2948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2948" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-2948" ref_url="https://www.suse.com/security/cve/CVE-2009-2948" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html" source="SUSE-SU"/>
    <description>
    mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-2948/">CVE-2009-2948</cve>
	<bugzilla href="https://bugzilla.suse.com/515479">SUSE bug 515479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/542150">SUSE bug 542150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/543115">SUSE bug 543115</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141234" comment="cifs-utils-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141851" comment="cifs-utils-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144723" comment="cifs-utils-devel-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145019" comment="cifs-utils-devel-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512063" comment="cifs-utils-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512759" comment="cifs-utils-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513638" comment="cifs-utils-devel-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513927" comment="cifs-utils-devel-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3026</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3026" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3026" ref_url="https://www.suse.com/security/cve/CVE-2009-3026" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3026/">CVE-2009-3026</cve>
	<bugzilla href="https://bugzilla.suse.com/535570">SUSE bug 535570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3069</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3069" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3069" ref_url="https://www.suse.com/security/cve/CVE-2009-3069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3069/">CVE-2009-3069</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3070</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3070" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3070" ref_url="https://www.suse.com/security/cve/CVE-2009-3070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3070/">CVE-2009-3070</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3071</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3071" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3071" ref_url="https://www.suse.com/security/cve/CVE-2009-3071" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3071/">CVE-2009-3071</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3072</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3072" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3072" ref_url="https://www.suse.com/security/cve/CVE-2009-3072" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3072/">CVE-2009-3072</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3073</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3073" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3073" ref_url="https://www.suse.com/security/cve/CVE-2009-3073" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3073/">CVE-2009-3073</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3074</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3074" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3074" ref_url="https://www.suse.com/security/cve/CVE-2009-3074" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3074/">CVE-2009-3074</cve>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3075</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3075" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3075" ref_url="https://www.suse.com/security/cve/CVE-2009-3075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3075/">CVE-2009-3075</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3077</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3077" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3077" ref_url="https://www.suse.com/security/cve/CVE-2009-3077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3077/">CVE-2009-3077</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3078</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3078" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3078" ref_url="https://www.suse.com/security/cve/CVE-2009-3078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3078/">CVE-2009-3078</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3079</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3079" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3079" ref_url="https://www.suse.com/security/cve/CVE-2009-3079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3079/">CVE-2009-3079</cve>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/538290">SUSE bug 538290</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3083</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3083" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3083" ref_url="https://www.suse.com/security/cve/CVE-2009-3083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3083/">CVE-2009-3083</cve>
	<bugzilla href="https://bugzilla.suse.com/536602">SUSE bug 536602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3084</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3084" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3084" ref_url="https://www.suse.com/security/cve/CVE-2009-3084" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect "UTF16-LE" charset name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3084/">CVE-2009-3084</cve>
	<bugzilla href="https://bugzilla.suse.com/536602">SUSE bug 536602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3085</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3085" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3085" ref_url="https://www.suse.com/security/cve/CVE-2009-3085" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3085/">CVE-2009-3085</cve>
	<bugzilla href="https://bugzilla.suse.com/536602">SUSE bug 536602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3094</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3094" ref_url="https://www.suse.com/security/cve/CVE-2009-3094" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3094/">CVE-2009-3094</cve>
	<bugzilla href="https://bugzilla.suse.com/538322">SUSE bug 538322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3095</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3095" ref_url="https://www.suse.com/security/cve/CVE-2009-3095" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3095/">CVE-2009-3095</cve>
	<bugzilla href="https://bugzilla.suse.com/538322">SUSE bug 538322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3228</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3228" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3228" ref_url="https://www.suse.com/security/cve/CVE-2009-3228" source="SUSE CVE"/>
    <description>
    The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-3228/">CVE-2009-3228</cve>
	<bugzilla href="https://bugzilla.suse.com/1175788">SUSE bug 1175788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/536467">SUSE bug 536467</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093235" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3235</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3235" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3235" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3235" ref_url="https://www.suse.com/security/cve/CVE-2009-3235" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3235/">CVE-2009-3235</cve>
	<bugzilla href="https://bugzilla.suse.com/539876">SUSE bug 539876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/539877">SUSE bug 539877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143271" comment="perl-Cyrus-IMAP-2.3.18-35.71 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143272" comment="perl-Cyrus-SIEVE-managesieve-2.3.18-35.71 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3241</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3241" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3241" ref_url="https://www.suse.com/security/cve/CVE-2009-3241" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3241/">CVE-2009-3241</cve>
	<bugzilla href="https://bugzilla.suse.com/541654">SUSE bug 541654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3242</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3242" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3242" ref_url="https://www.suse.com/security/cve/CVE-2009-3242" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3242/">CVE-2009-3242</cve>
	<bugzilla href="https://bugzilla.suse.com/541659">SUSE bug 541659</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3243</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3243" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3243" ref_url="https://www.suse.com/security/cve/CVE-2009-3243" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3243/">CVE-2009-3243</cve>
	<bugzilla href="https://bugzilla.suse.com/541655">SUSE bug 541655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3245</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3245" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3245" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3245" ref_url="https://www.suse.com/security/cve/CVE-2009-3245" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3245/">CVE-2009-3245</cve>
	<bugzilla href="https://bugzilla.suse.com/587379">SUSE bug 587379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590833">SUSE bug 590833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/593560">SUSE bug 593560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/641950">SUSE bug 641950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3274</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3274" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3274" ref_url="https://www.suse.com/security/cve/CVE-2009-3274" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3274/">CVE-2009-3274</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/534458">SUSE bug 534458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3286</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3286" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3286" ref_url="https://www.suse.com/security/cve/CVE-2009-3286" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3286/">CVE-2009-3286</cve>
	<bugzilla href="https://bugzilla.suse.com/541648">SUSE bug 541648</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3295</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3295" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3295" ref_url="https://www.suse.com/security/cve/CVE-2009-3295" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7005118" ref_url="https://www.suse.com/support/kb/doc/?id=7005118" source="SUSE-SU"/>
    <description>
    The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3295/">CVE-2009-3295</cve>
	<bugzilla href="https://bugzilla.suse.com/561347">SUSE bug 561347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3297</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3297" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3297" ref_url="https://www.suse.com/security/cve/CVE-2009-3297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-0787, CVE-2010-0788, CVE-2010-0789.  Reason: this candidate was intended for one issue in Samba, but it was used for multiple distinct issues, including one in FUSE and one in ncpfs.  Notes: All CVE users should consult CVE-2010-0787 (Samba), CVE-2010-0788 (ncpfs), and CVE-2010-0789 (FUSE) to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-3297/">CVE-2009-3297</cve>
	<bugzilla href="https://bugzilla.suse.com/550002">SUSE bug 550002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550003">SUSE bug 550003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550004">SUSE bug 550004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577925">SUSE bug 577925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583535">SUSE bug 583535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583536">SUSE bug 583536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/594263">SUSE bug 594263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/620680">SUSE bug 620680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/651598">SUSE bug 651598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110488" comment="fuse-2.9.3-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110491" comment="libfuse2-2.9.3-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110489" comment="fuse-devel-2.9.3-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110490" comment="fuse-devel-static-2.9.3-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110493" comment="libulockmgr1-2.9.3-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141346" comment="fuse-2.9.3-3.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141347" comment="libfuse2-2.9.3-3.65 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144743" comment="fuse-devel-2.9.3-3.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144744" comment="fuse-devel-static-2.9.3-3.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144745" comment="libulockmgr1-2.9.3-3.65 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512133" comment="fuse-2.9.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512134" comment="libfuse2-2.9.3-6.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513658" comment="fuse-devel-2.9.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513659" comment="fuse-devel-static-2.9.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513660" comment="libulockmgr1-2.9.3-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3370</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3370" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3370" ref_url="https://www.suse.com/security/cve/CVE-2009-3370" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3370/">CVE-2009-3370</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3371</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3371" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3371" ref_url="https://www.suse.com/security/cve/CVE-2009-3371" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by creating JavaScript web-workers recursively.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3371/">CVE-2009-3371</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3372</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3372" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3372" ref_url="https://www.suse.com/security/cve/CVE-2009-3372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3372/">CVE-2009-3372</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3373</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3373" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3373" ref_url="https://www.suse.com/security/cve/CVE-2009-3373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3373/">CVE-2009-3373</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557686">SUSE bug 557686</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3374</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3374" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3374" ref_url="https://www.suse.com/security/cve/CVE-2009-3374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to "doubly-wrapped objects."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3374/">CVE-2009-3374</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3375</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3375" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3375" ref_url="https://www.suse.com/security/cve/CVE-2009-3375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3375/">CVE-2009-3375</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3376</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3376" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3376" ref_url="https://www.suse.com/security/cve/CVE-2009-3376" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3376/">CVE-2009-3376</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3377</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3377" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3377" ref_url="https://www.suse.com/security/cve/CVE-2009-3377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3377/">CVE-2009-3377</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3378</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3378" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3378" ref_url="https://www.suse.com/security/cve/CVE-2009-3378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a crafted .ogg video file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3378/">CVE-2009-3378</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3379</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3379" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3379" ref_url="https://www.suse.com/security/cve/CVE-2009-3379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3379/">CVE-2009-3379</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/608192">SUSE bug 608192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150271" comment="libvorbis-doc-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144948" comment="libvorbis-devel-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145171" comment="libvorbis-devel-1.3.3-8.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144948" comment="libvorbis-devel-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145171" comment="libvorbis-devel-1.3.3-8.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178202" comment="libvorbis0-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178203" comment="libvorbis0-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178204" comment="libvorbisenc2-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178205" comment="libvorbisenc2-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178206" comment="libvorbisfile3-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178207" comment="libvorbisfile3-32bit-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178247" comment="libvorbis-doc-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178202" comment="libvorbis0-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178203" comment="libvorbis0-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178204" comment="libvorbisenc2-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178205" comment="libvorbisenc2-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178206" comment="libvorbisfile3-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178207" comment="libvorbisfile3-32bit-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178247" comment="libvorbis-doc-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178202" comment="libvorbis0-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178203" comment="libvorbis0-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178204" comment="libvorbisenc2-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178205" comment="libvorbisenc2-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178206" comment="libvorbisfile3-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178207" comment="libvorbisfile3-32bit-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178241" comment="libvorbis-devel-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178241" comment="libvorbis-devel-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3380</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3380" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3380" ref_url="https://www.suse.com/security/cve/CVE-2009-3380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3380/">CVE-2009-3380</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3381</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3381" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3381" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3381" ref_url="https://www.suse.com/security/cve/CVE-2009-3381" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3381/">CVE-2009-3381</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3383</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3383" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3383" ref_url="https://www.suse.com/security/cve/CVE-2009-3383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3383/">CVE-2009-3383</cve>
	<bugzilla href="https://bugzilla.suse.com/522109">SUSE bug 522109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/545277">SUSE bug 545277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3388</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3388" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3388" ref_url="https://www.suse.com/security/cve/CVE-2009-3388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
    <description>
    liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to "memory safety issues."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3388/">CVE-2009-3388</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3389</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3389" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3389" ref_url="https://www.suse.com/security/cve/CVE-2009-3389" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3389/">CVE-2009-3389</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581722">SUSE bug 581722</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3490</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3490" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3490" ref_url="https://www.suse.com/security/cve/CVE-2009-3490" source="SUSE CVE"/>
    <description>
    GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2009-3490/">CVE-2009-3490</cve>
	<bugzilla href="https://bugzilla.suse.com/528298">SUSE bug 528298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334123" comment="wget is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3547</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3547" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3547" ref_url="https://www.suse.com/security/cve/CVE-2009-3547" source="SUSE CVE"/>
		<reference ref_id="" ref_url="" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:054" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:055" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2009-3547/">CVE-2009-3547</cve>
	<bugzilla href="https://bugzilla.suse.com/550001">SUSE bug 550001</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3553</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3553" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3553" ref_url="https://www.suse.com/security/cve/CVE-2009-3553" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3553/">CVE-2009-3553</cve>
	<bugzilla href="https://bugzilla.suse.com/554861">SUSE bug 554861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/574336">SUSE bug 574336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/578215">SUSE bug 578215</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144726" comment="cups-devel-1.7.5-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141281" comment="cups-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141282" comment="cups-client-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141283" comment="cups-libs-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141284" comment="cups-libs-32bit-1.7.5-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147501" comment="cups154-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147502" comment="cups154-client-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147503" comment="cups154-filters-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147504" comment="cups154-libs-1.5.4-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513929" comment="cups-ddk-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513930" comment="cups-devel-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3555</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3555" ref_url="https://www.suse.com/security/cve/CVE-2009-3555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="TID7005397" ref_url="https://www.suse.com/support/kb/doc/?id=7005397" source="SUSE-SU"/>
		<reference ref_id="TID7005950" ref_url="https://www.suse.com/support/kb/doc/?id=7005950" source="SUSE-SU"/>
		<reference ref_id="TID7008600" ref_url="https://www.suse.com/support/kb/doc/?id=7008600" source="SUSE-SU"/>
		<reference ref_id="TID7008930" ref_url="https://www.suse.com/support/kb/doc/?id=7008930" source="SUSE-SU"/>
		<reference ref_id="TID7009561" ref_url="https://www.suse.com/support/kb/doc/?id=7009561" source="SUSE-SU"/>
		<reference ref_id="TID7010166" ref_url="https://www.suse.com/support/kb/doc/?id=7010166" source="SUSE-SU"/>
		<reference ref_id="TID7016794" ref_url="https://www.suse.com/support/kb/doc/?id=7016794" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0100-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0182-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1025-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1025-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3555/">CVE-2009-3555</cve>
	<bugzilla href="https://bugzilla.suse.com/1077582">SUSE bug 1077582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/552497">SUSE bug 552497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/553641">SUSE bug 553641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/554069">SUSE bug 554069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/554084">SUSE bug 554084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/554085">SUSE bug 554085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/555177">SUSE bug 555177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557168">SUSE bug 557168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/564507">SUSE bug 564507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566041">SUSE bug 566041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/584292">SUSE bug 584292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/588996">SUSE bug 588996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590826">SUSE bug 590826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/592589">SUSE bug 592589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/594415">SUSE bug 594415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604782">SUSE bug 604782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/614753">SUSE bug 614753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/622073">SUSE bug 622073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/623905">SUSE bug 623905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/642531">SUSE bug 642531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648140">SUSE bug 648140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/670152">SUSE bug 670152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/704832">SUSE bug 704832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/728876">SUSE bug 728876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729181">SUSE bug 729181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/753357">SUSE bug 753357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791794">SUSE bug 791794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/799454">SUSE bug 799454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815621">SUSE bug 815621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905347">SUSE bug 905347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979060">SUSE bug 979060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986238">SUSE bug 986238</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3556</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3556" ref_url="https://www.suse.com/security/cve/CVE-2009-3556" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html" source="SUSE-SU"/>
    <description>
    A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-3556/">CVE-2009-3556</cve>
	<bugzilla href="https://bugzilla.suse.com/572193">SUSE bug 572193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/605463">SUSE bug 605463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3559</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3559" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3559" ref_url="https://www.suse.com/security/cve/CVE-2009-3559" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that attempts to perform a require_once on a file in a standard library directory. NOTE: a reliable third party reports that this is not a vulnerability, because it results in a more restrictive security policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3559/">CVE-2009-3559</cve>
	<bugzilla href="https://bugzilla.suse.com/557157">SUSE bug 557157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335136" comment="apache2-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009353021" comment="compat-libgcrypt11 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333965" comment="apache2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335131" comment="apache2-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335132" comment="apache2-example-pages is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335133" comment="apache2-prefork is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335134" comment="apache2-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335135" comment="apache2-worker is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336128" comment="libfreetype6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336127" comment="libfreetype6-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334020" comment="curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335434" comment="libcurl4 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335435" comment="libcurl4-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009696975" comment="mozilla-nspr is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009696976" comment="mozilla-nspr-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654596" comment="libpcre2-16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654597" comment="libpcre2-32-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654598" comment="libpcre2-8-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654599" comment="libpcre2-posix2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333989" comment="tomcat is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335219" comment="tomcat-admin-webapps is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335220" comment="tomcat-docs-webapp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335976" comment="tomcat-el-3_0-api is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335222" comment="tomcat-javadoc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335977" comment="tomcat-jsp-2_3-api is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335224" comment="tomcat-lib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335978" comment="tomcat-servlet-3_1-api is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335226" comment="tomcat-webapps is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009697273" comment="libz1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009697274" comment="libz1-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335461" comment="zlib-devel is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338847" comment="tomcat-servlet-4_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335136" comment="apache2-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336129" comment="freetype2-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335749" comment="libopenssl0_9_8 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655562" comment="pcre2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335749" comment="libopenssl0_9_8 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009696975" comment="mozilla-nspr is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009696976" comment="mozilla-nspr-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009696977" comment="mozilla-nspr-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654596" comment="libpcre2-16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654597" comment="libpcre2-32-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654598" comment="libpcre2-8-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654599" comment="libpcre2-posix2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338847" comment="tomcat-servlet-4_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336128" comment="libfreetype6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336127" comment="libfreetype6-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009340760" comment="nodejs10 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340761" comment="nodejs10-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340762" comment="nodejs10-docs is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340763" comment="npm10 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659709" comment="nodejs12 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659754" comment="nodejs12-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659755" comment="nodejs12-docs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009659756" comment="npm12 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334445" comment="nodejs4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728520" comment="nodejs4-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728521" comment="nodejs4-docs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728522" comment="npm4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334390" comment="nodejs6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728517" comment="nodejs6-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728518" comment="nodejs6-docs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728519" comment="npm6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009654596" comment="libpcre2-16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654597" comment="libpcre2-32-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654598" comment="libpcre2-8-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654599" comment="libpcre2-posix2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338847" comment="tomcat-servlet-4_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009655562" comment="pcre2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009696975" comment="mozilla-nspr is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009696976" comment="mozilla-nspr-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009696977" comment="mozilla-nspr-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654596" comment="libpcre2-16-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654597" comment="libpcre2-32-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654598" comment="libpcre2-8-0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654599" comment="libpcre2-posix2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334134" comment="tomcat is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336148" comment="tomcat-admin-webapps is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336149" comment="tomcat-docs-webapp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336150" comment="tomcat-el-3_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336151" comment="tomcat-javadoc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336152" comment="tomcat-jsp-2_3-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336153" comment="tomcat-lib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338847" comment="tomcat-servlet-4_0-api is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336155" comment="tomcat-webapps is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3560</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3560" ref_url="https://www.suse.com/security/cve/CVE-2009-3560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00014.html" source="SUSE-SU"/>
    <description>
    The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3560/">CVE-2009-3560</cve>
	<bugzilla href="https://bugzilla.suse.com/550666">SUSE bug 550666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/558892">SUSE bug 558892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/561561">SUSE bug 561561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581162">SUSE bug 581162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581765">SUSE bug 581765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/611931">SUSE bug 611931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/694595">SUSE bug 694595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725950">SUSE bug 725950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128466" comment="libexpat1-32bit-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128466" comment="libexpat1-32bit-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147559" comment="libapr-util1-1.5.3-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147560" comment="libapr-util1-dbd-sqlite3-1.5.3-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144855" comment="libexpat-devel-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144855" comment="libexpat-devel-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128469" comment="libexpat-devel-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148243" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148244" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148245" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148243" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148244" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148245" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148248" comment="libexpat-devel-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513018" comment="libapr-util1-dbd-sqlite3-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513018" comment="libapr-util1-dbd-sqlite3-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168393" comment="libapr-util1-dbd-sqlite3-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168432" comment="libapr-util1-devel-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162539" comment="libexpat-devel-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514040" comment="libapr-util1-devel-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514062" comment="libexpat-devel-2.1.0-21.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3607</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3607" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3607" ref_url="https://www.suse.com/security/cve/CVE-2009-3607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3607/">CVE-2009-3607</cve>
	<bugzilla href="https://bugzilla.suse.com/546393">SUSE bug 546393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566697">SUSE bug 566697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3608</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3608" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3608" ref_url="https://www.suse.com/security/cve/CVE-2009-3608" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3608/">CVE-2009-3608</cve>
	<bugzilla href="https://bugzilla.suse.com/543090">SUSE bug 543090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/543410">SUSE bug 543410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546400">SUSE bug 546400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546404">SUSE bug 546404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/556049">SUSE bug 556049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566697">SUSE bug 566697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3612</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3612" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3612" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3612" ref_url="https://www.suse.com/security/cve/CVE-2009-3612" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-3612/">CVE-2009-3612</cve>
	<bugzilla href="https://bugzilla.suse.com/536467">SUSE bug 536467</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3615</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3615" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3615" ref_url="https://www.suse.com/security/cve/CVE-2009-3615" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3615/">CVE-2009-3615</cve>
	<bugzilla href="https://bugzilla.suse.com/548072">SUSE bug 548072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550170">SUSE bug 550170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3620</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3620" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3620" ref_url="https://www.suse.com/security/cve/CVE-2009-3620" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3620/">CVE-2009-3620</cve>
	<bugzilla href="https://bugzilla.suse.com/548071">SUSE bug 548071</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3621</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3621" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3621" ref_url="https://www.suse.com/security/cve/CVE-2009-3621" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2009-3621/">CVE-2009-3621</cve>
	<bugzilla href="https://bugzilla.suse.com/548070">SUSE bug 548070</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3623</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3623" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3623" ref_url="https://www.suse.com/security/cve/CVE-2009-3623" source="SUSE CVE"/>
    <description>
    The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an NFSv4 mount request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3623/">CVE-2009-3623</cve>
	<bugzilla href="https://bugzilla.suse.com/549029">SUSE bug 549029</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3624</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3624" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3624" ref_url="https://www.suse.com/security/cve/CVE-2009-3624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3624/">CVE-2009-3624</cve>
	<bugzilla href="https://bugzilla.suse.com/549030">SUSE bug 549030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3627</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3627" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3627" ref_url="https://www.suse.com/security/cve/CVE-2009-3627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3627/">CVE-2009-3627</cve>
	<bugzilla href="https://bugzilla.suse.com/550076">SUSE bug 550076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/585716">SUSE bug 585716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141067" comment="perl-HTML-Parser-3.71-1.178 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147605" comment="perl-HTML-Parser-3.71-1.145 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3638</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3638" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3638" ref_url="https://www.suse.com/security/cve/CVE-2009-3638" source="SUSE CVE"/>
    <description>
    Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3638/">CVE-2009-3638</cve>
	<bugzilla href="https://bugzilla.suse.com/550072">SUSE bug 550072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3640</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3640" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3640" ref_url="https://www.suse.com/security/cve/CVE-2009-3640" source="SUSE CVE"/>
    <description>
    The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via a call to the kvm_vcpu_ioctl function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3640/">CVE-2009-3640</cve>
	<bugzilla href="https://bugzilla.suse.com/549487">SUSE bug 549487</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3700</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3700" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3700" ref_url="https://www.suse.com/security/cve/CVE-2009-3700" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3700/">CVE-2009-3700</cve>
	<bugzilla href="https://bugzilla.suse.com/550930">SUSE bug 550930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141128" comment="squidGuard-1.4-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141129" comment="squidGuard-doc-1.4-23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155979" comment="squidGuard-1.4-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155980" comment="squidGuard-doc-1.4-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513415" comment="squidGuard-1.4-30.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513416" comment="squidGuard-doc-1.4-30.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3720</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3720" ref_url="https://www.suse.com/security/cve/CVE-2009-3720" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2009:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00014.html" source="SUSE-SU"/>
    <description>
    The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3720/">CVE-2009-3720</cve>
	<bugzilla href="https://bugzilla.suse.com/534721">SUSE bug 534721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550664">SUSE bug 550664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/550666">SUSE bug 550666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/558892">SUSE bug 558892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/561561">SUSE bug 561561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581162">SUSE bug 581162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581765">SUSE bug 581765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/611931">SUSE bug 611931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725950">SUSE bug 725950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780279" comment="python-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128466" comment="libexpat1-32bit-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128466" comment="libexpat1-32bit-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147559" comment="libapr-util1-1.5.3-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147560" comment="libapr-util1-dbd-sqlite3-1.5.3-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144855" comment="libexpat-devel-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144855" comment="libexpat-devel-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128469" comment="libexpat-devel-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148243" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148244" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148245" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148243" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148244" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148245" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148248" comment="libexpat-devel-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334187" comment="python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336487" comment="python3-curses is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513018" comment="libapr-util1-dbd-sqlite3-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009668174" comment="python-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334187" comment="python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334105" comment="python36 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513018" comment="libapr-util1-dbd-sqlite3-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780278" comment="libpython2_7-1_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780495" comment="libpython2_7-1_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009668174" comment="python-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780496" comment="python-base-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780279" comment="python-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780280" comment="python-xml is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334187" comment="python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336487" comment="python3-curses is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009339078" comment="python3-tk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334105" comment="python36 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168393" comment="libapr-util1-dbd-sqlite3-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168432" comment="libapr-util1-devel-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162539" comment="libexpat-devel-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514040" comment="libapr-util1-devel-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514062" comment="libexpat-devel-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336488" comment="python3-dbm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334105" comment="python36 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009668174" comment="python-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334187" comment="python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334105" comment="python36 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009780278" comment="libpython2_7-1_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780495" comment="libpython2_7-1_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009668174" comment="python-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780496" comment="python-base-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780279" comment="python-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780280" comment="python-xml is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334187" comment="python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336487" comment="python3-curses is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009780278" comment="libpython2_7-1_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780495" comment="libpython2_7-1_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009668174" comment="python-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780496" comment="python-base-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009780280" comment="python-xml is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334187" comment="python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336487" comment="python3-curses is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3736</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3736" ref_url="https://www.suse.com/security/cve/CVE-2009-3736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
    <description>
    ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3736/">CVE-2009-3736</cve>
	<bugzilla href="https://bugzilla.suse.com/556122">SUSE bug 556122</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140877" comment="libtool-2.4.2-14.60 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159158" comment="libtool-2.4.2-16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513163" comment="libtool-2.4.2-17.4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140875" comment="libltdl7-2.4.2-14.60 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140876" comment="libltdl7-32bit-2.4.2-14.60 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140877" comment="libtool-2.4.2-14.60 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140878" comment="libtool-32bit-2.4.2-14.60 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140875" comment="libltdl7-2.4.2-14.60 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140876" comment="libltdl7-32bit-2.4.2-14.60 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147569" comment="libltdl7-2.4.2-14.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147570" comment="libtool-2.4.2-14.30 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159156" comment="libltdl7-2.4.2-16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159157" comment="libltdl7-32bit-2.4.2-16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159158" comment="libtool-2.4.2-16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159159" comment="libtool-32bit-2.4.2-16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159156" comment="libltdl7-2.4.2-16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159157" comment="libltdl7-32bit-2.4.2-16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512352" comment="libltdl7-2.4.2-17.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512353" comment="libltdl7-32bit-2.4.2-17.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513163" comment="libtool-2.4.2-17.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513164" comment="libtool-32bit-2.4.2-17.4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512352" comment="libltdl7-2.4.2-17.4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512353" comment="libltdl7-32bit-2.4.2-17.4.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3793</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3793" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3793" ref_url="https://www.suse.com/security/cve/CVE-2009-3793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3793/">CVE-2009-3793</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3794</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3794" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3794" ref_url="https://www.suse.com/security/cve/CVE-2009-3794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:062" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3794/">CVE-2009-3794</cve>
	<bugzilla href="https://bugzilla.suse.com/560259">SUSE bug 560259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3796</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3796" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3796" ref_url="https://www.suse.com/security/cve/CVE-2009-3796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:062" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a "data injection vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3796/">CVE-2009-3796</cve>
	<bugzilla href="https://bugzilla.suse.com/560259">SUSE bug 560259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3797</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3797" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3797" ref_url="https://www.suse.com/security/cve/CVE-2009-3797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:062" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3797/">CVE-2009-3797</cve>
	<bugzilla href="https://bugzilla.suse.com/560259">SUSE bug 560259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3798</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3798" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3798" ref_url="https://www.suse.com/security/cve/CVE-2009-3798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:062" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3798/">CVE-2009-3798</cve>
	<bugzilla href="https://bugzilla.suse.com/560259">SUSE bug 560259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3799</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3799" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3799" ref_url="https://www.suse.com/security/cve/CVE-2009-3799" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:062" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3799/">CVE-2009-3799</cve>
	<bugzilla href="https://bugzilla.suse.com/560259">SUSE bug 560259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3800</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3800" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3800" ref_url="https://www.suse.com/security/cve/CVE-2009-3800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:062" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3800/">CVE-2009-3800</cve>
	<bugzilla href="https://bugzilla.suse.com/560259">SUSE bug 560259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3826</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3826" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3826" ref_url="https://www.suse.com/security/cve/CVE-2009-3826" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0460-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00006.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3826/">CVE-2009-3826</cve>
	<bugzilla href="https://bugzilla.suse.com/550930">SUSE bug 550930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141128" comment="squidGuard-1.4-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141129" comment="squidGuard-doc-1.4-23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155979" comment="squidGuard-1.4-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155980" comment="squidGuard-doc-1.4-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513415" comment="squidGuard-1.4-30.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513416" comment="squidGuard-doc-1.4-30.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093889" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3889</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3889" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3889" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3889" ref_url="https://www.suse.com/security/cve/CVE-2009-3889" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
    <description>
    The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3889/">CVE-2009-3889</cve>
	<bugzilla href="https://bugzilla.suse.com/555173">SUSE bug 555173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557180">SUSE bug 557180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3894</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3894" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3894" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3894" ref_url="https://www.suse.com/security/cve/CVE-2009-3894" source="SUSE CVE"/>
    <description>
    Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3894/">CVE-2009-3894</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140548" comment="dstat-0.7.2-1.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512811" comment="dstat-0.7.3-1.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3939</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3939" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3939" ref_url="https://www.suse.com/security/cve/CVE-2009-3939" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2009:064" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3939/">CVE-2009-3939</cve>
	<bugzilla href="https://bugzilla.suse.com/555173">SUSE bug 555173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/557180">SUSE bug 557180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3951</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3951" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3951" ref_url="https://www.suse.com/security/cve/CVE-2009-3951" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:062" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-3951/">CVE-2009-3951</cve>
	<bugzilla href="https://bugzilla.suse.com/560259">SUSE bug 560259</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3979</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3979" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3979" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3979" ref_url="https://www.suse.com/security/cve/CVE-2009-3979" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3979/">CVE-2009-3979</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3980</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3980" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3980" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3980" ref_url="https://www.suse.com/security/cve/CVE-2009-3980" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3980/">CVE-2009-3980</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3982</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3982" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3982" ref_url="https://www.suse.com/security/cve/CVE-2009-3982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3982/">CVE-2009-3982</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3983</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3983" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3983" ref_url="https://www.suse.com/security/cve/CVE-2009-3983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0273-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00021.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3983/">CVE-2009-3983</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590499">SUSE bug 590499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607935">SUSE bug 607935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3984</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3984" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3984" ref_url="https://www.suse.com/security/cve/CVE-2009-3984" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3984/">CVE-2009-3984</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3985</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3985" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3985" ref_url="https://www.suse.com/security/cve/CVE-2009-3985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:063" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2009:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00002.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3985/">CVE-2009-3985</cve>
	<bugzilla href="https://bugzilla.suse.com/559807">SUSE bug 559807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3995</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3995" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3995" ref_url="https://www.suse.com/security/cve/CVE-2009-3995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:1471-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004100.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0209-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3995/">CVE-2009-3995</cve>
	<bugzilla href="https://bugzilla.suse.com/577875">SUSE bug 577875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/625547">SUSE bug 625547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752802">SUSE bug 752802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141563" comment="libmikmod3-32bit-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144883" comment="libmikmod-devel-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3996</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-3996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3996" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-3996" ref_url="https://www.suse.com/security/cve/CVE-2009-3996" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0209-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00002.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3996/">CVE-2009-3996</cve>
	<bugzilla href="https://bugzilla.suse.com/577875">SUSE bug 577875</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141563" comment="libmikmod3-32bit-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144883" comment="libmikmod-devel-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4012</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4012" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4012" ref_url="https://www.suse.com/security/cve/CVE-2009-4012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-4012/">CVE-2009-4012</cve>
	<bugzilla href="https://bugzilla.suse.com/569615">SUSE bug 569615</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140966" comment="libthai-data-0.1.25-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140967" comment="libthai0-0.1.25-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140968" comment="libthai0-32bit-0.1.25-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140966" comment="libthai-data-0.1.25-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140967" comment="libthai0-0.1.25-4.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4019</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4019" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4019" ref_url="https://www.suse.com/security/cve/CVE-2009-4019" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00006.html" source="SUSE-SU"/>
    <description>
    mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-4019/">CVE-2009-4019</cve>
	<bugzilla href="https://bugzilla.suse.com/557669">SUSE bug 557669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604528">SUSE bug 604528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131803" comment="libmysqlclient-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131804" comment="libmysqld-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131805" comment="libmysqld18-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143236" comment="mariadb-tools-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143361" comment="mariadb-tools-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144888" comment="libmysqlclient-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144889" comment="libmysqld-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144890" comment="libmysqld18-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145144" comment="libmysqlclient-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145145" comment="libmysqld-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145146" comment="libmysqld18-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159168" comment="mariadb-tools-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159818" comment="libmysqlclient-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159819" comment="libmysqld-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159820" comment="libmysqld18-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513558" comment="mariadb-tools-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513165" comment="libmysqlclient18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513166" comment="libmysqlclient18-32bit-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513324" comment="mariadb-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513167" comment="mariadb-100-errormessages-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513325" comment="mariadb-client-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513326" comment="mariadb-errormessages-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513327" comment="mariadb-tools-10.2.25-3.19.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513740" comment="libmysqlclient-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513741" comment="libmysqld-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513742" comment="libmysqld18-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514078" comment="libmysqlclient-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514080" comment="libmysqld-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514081" comment="libmysqld18-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514300" comment="libmysqlclient_r18-32bit-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4020</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4020" ref_url="https://www.suse.com/security/cve/CVE-2009-4020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0781-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4020/">CVE-2009-4020</cve>
	<bugzilla href="https://bugzilla.suse.com/564374">SUSE bug 564374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/605463">SUSE bug 605463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/760902">SUSE bug 760902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4022</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4022" ref_url="https://www.suse.com/security/cve/CVE-2009-4022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2009:059" ref_url="https://lists.opensuse.org/opensuse-security-announce/2009-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4022/">CVE-2009-4022</cve>
	<bugzilla href="https://bugzilla.suse.com/558260">SUSE bug 558260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/570912">SUSE bug 570912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/644911">SUSE bug 644911</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4026</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4026" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4026" ref_url="https://www.suse.com/security/cve/CVE-2009-4026" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    The mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4026/">CVE-2009-4026</cve>
	<bugzilla href="https://bugzilla.suse.com/558267">SUSE bug 558267</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4027</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4027" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4027" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4027" ref_url="https://www.suse.com/security/cve/CVE-2009-4027" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation session.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4027/">CVE-2009-4027</cve>
	<bugzilla href="https://bugzilla.suse.com/558267">SUSE bug 558267</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4028</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4028" ref_url="https://www.suse.com/security/cve/CVE-2009-4028" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00006.html" source="SUSE-SU"/>
    <description>
    The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4028/">CVE-2009-4028</cve>
	<bugzilla href="https://bugzilla.suse.com/557669">SUSE bug 557669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604528">SUSE bug 604528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131803" comment="libmysqlclient-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131804" comment="libmysqld-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131805" comment="libmysqld18-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143236" comment="mariadb-tools-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143361" comment="mariadb-tools-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144888" comment="libmysqlclient-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144889" comment="libmysqld-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144890" comment="libmysqld18-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145144" comment="libmysqlclient-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145145" comment="libmysqld-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145146" comment="libmysqld18-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159168" comment="mariadb-tools-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159818" comment="libmysqlclient-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159819" comment="libmysqld-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159820" comment="libmysqld18-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513558" comment="mariadb-tools-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513165" comment="libmysqlclient18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513166" comment="libmysqlclient18-32bit-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513324" comment="mariadb-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513167" comment="mariadb-100-errormessages-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513325" comment="mariadb-client-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513326" comment="mariadb-errormessages-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513327" comment="mariadb-tools-10.2.25-3.19.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513740" comment="libmysqlclient-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513741" comment="libmysqld-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513742" comment="libmysqld18-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514078" comment="libmysqlclient-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514080" comment="libmysqld-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514081" comment="libmysqld18-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514300" comment="libmysqlclient_r18-32bit-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4029</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4029" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4029" ref_url="https://www.suse.com/security/cve/CVE-2009-4029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000578.html" source="SUSE-SU"/>
    <description>
    The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4029/">CVE-2009-4029</cve>
	<bugzilla href="https://bugzilla.suse.com/559815">SUSE bug 559815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/770618">SUSE bug 770618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786745">SUSE bug 786745</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140465" comment="automake-1.13.4-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140466" comment="m4-1.4.16-15.74 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143135" comment="automake-1.13.4-4.56 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140465" comment="automake-1.13.4-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140466" comment="m4-1.4.16-15.74 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140465" comment="automake-1.13.4-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147513" comment="m4-1.4.16-15.67 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143135" comment="automake-1.13.4-4.56 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140466" comment="m4-1.4.16-15.74 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4030</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4030" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4030" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4030" ref_url="https://www.suse.com/security/cve/CVE-2009-4030" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0198-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00006.html" source="SUSE-SU"/>
    <description>
    MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4030/">CVE-2009-4030</cve>
	<bugzilla href="https://bugzilla.suse.com/557669">SUSE bug 557669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604528">SUSE bug 604528</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131803" comment="libmysqlclient-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131804" comment="libmysqld-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131805" comment="libmysqld18-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141565" comment="libmysqlclient18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141566" comment="libmysqlclient18-32bit-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141569" comment="mariadb-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141570" comment="mariadb-client-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141571" comment="mariadb-errormessages-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143236" comment="mariadb-tools-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141568" comment="libmysqlclient_r18-32bit-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143361" comment="mariadb-tools-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144888" comment="libmysqlclient-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141567" comment="libmysqlclient_r18-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144889" comment="libmysqld-devel-10.0.11-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144890" comment="libmysqld18-10.0.11-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145144" comment="libmysqlclient-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145145" comment="libmysqld-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145146" comment="libmysqld18-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159168" comment="mariadb-tools-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159818" comment="libmysqlclient-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159819" comment="libmysqld-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159820" comment="libmysqld18-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513558" comment="mariadb-tools-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513165" comment="libmysqlclient18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513166" comment="libmysqlclient18-32bit-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513324" comment="mariadb-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513167" comment="mariadb-100-errormessages-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513325" comment="mariadb-client-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513326" comment="mariadb-errormessages-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513327" comment="mariadb-tools-10.2.25-3.19.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513740" comment="libmysqlclient-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513741" comment="libmysqld-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513742" comment="libmysqld18-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514078" comment="libmysqlclient-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514080" comment="libmysqld-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514081" comment="libmysqld18-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514300" comment="libmysqlclient_r18-32bit-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4031</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4031" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4031" ref_url="https://www.suse.com/security/cve/CVE-2009-4031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00053.html" source="SUSE-SU"/>
    <description>
    The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4031/">CVE-2009-4031</cve>
	<bugzilla href="https://bugzilla.suse.com/558269">SUSE bug 558269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/558662">SUSE bug 558662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4034</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4034" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4034" ref_url="https://www.suse.com/security/cve/CVE-2009-4034" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html" source="SUSE-SU"/>
    <description>
    PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based PostgreSQL servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended client-hostname restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4034/">CVE-2009-4034</cve>
	<bugzilla href="https://bugzilla.suse.com/564710">SUSE bug 564710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/603968">SUSE bug 603968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4067</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4067" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4067" ref_url="https://www.suse.com/security/cve/CVE-2009-4067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-23"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2009-4067/">CVE-2009-4067</cve>
	<bugzilla href="https://bugzilla.suse.com/706375">SUSE bug 706375</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4131</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4131" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4131" ref_url="https://www.suse.com/security/cve/CVE-2009-4131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4131/">CVE-2009-4131</cve>
	<bugzilla href="https://bugzilla.suse.com/561018">SUSE bug 561018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/564380">SUSE bug 564380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4134</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4134" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4134" ref_url="https://www.suse.com/security/cve/CVE-2009-4134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
    <description>
    Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4134/">CVE-2009-4134</cve>
	<bugzilla href="https://bugzilla.suse.com/603255">SUSE bug 603255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/666027">SUSE bug 666027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4136</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4136" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4136" ref_url="https://www.suse.com/security/cve/CVE-2009-4136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html" source="SUSE-SU"/>
    <description>
    PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4136/">CVE-2009-4136</cve>
	<bugzilla href="https://bugzilla.suse.com/564360">SUSE bug 564360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/603969">SUSE bug 603969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4138</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4138" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4138" ref_url="https://www.suse.com/security/cve/CVE-2009-4138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4138/">CVE-2009-4138</cve>
	<bugzilla href="https://bugzilla.suse.com/564712">SUSE bug 564712</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4212</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4212" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4212" ref_url="https://www.suse.com/security/cve/CVE-2009-4212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7005185" ref_url="https://www.suse.com/support/kb/doc/?id=7005185" source="SUSE-SU"/>
		<reference ref_id="TID7005397" ref_url="https://www.suse.com/support/kb/doc/?id=7005397" source="SUSE-SU"/>
    <description>
    Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-4212/">CVE-2009-4212</cve>
	<bugzilla href="https://bugzilla.suse.com/561351">SUSE bug 561351</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4227</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4227" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4227" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4227" ref_url="https://www.suse.com/security/cve/CVE-2009-4227" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the read_1_3_textobject function in f_readold.c in Xfig 3.2.5b and earlier, and in the read_textobject function in read1_3.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses the 1.3 file format.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4227/">CVE-2009-4227</cve>
	<bugzilla href="https://bugzilla.suse.com/777469">SUSE bug 777469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145002" comment="xfig-3.2.5c-2.8 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4273</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4273" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4273" ref_url="https://www.suse.com/security/cve/CVE-2009-4273" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0166-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00032.html" source="SUSE-SU"/>
    <description>
    stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-4273/">CVE-2009-4273</cve>
	<bugzilla href="https://bugzilla.suse.com/574243">SUSE bug 574243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144994" comment="systemtap-sdt-devel-2.5-1.55 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145186" comment="systemtap-sdt-devel-2.5-4.44 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145368" comment="systemtap-sdt-devel-3.0-7.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159840" comment="systemtap-sdt-devel-3.0-10.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513883" comment="systemtap-sdt-devel-3.0-15.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514253" comment="systemtap-sdt-devel-3.0-20.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141135" comment="systemtap-3.0-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141136" comment="systemtap-runtime-3.0-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141137" comment="systemtap-server-3.0-7.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143298" comment="systemtap-2.5-1.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143299" comment="systemtap-runtime-2.5-1.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143300" comment="systemtap-server-2.5-1.55 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143397" comment="systemtap-2.5-4.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143398" comment="systemtap-runtime-2.5-4.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143399" comment="systemtap-server-2.5-4.44 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159309" comment="systemtap-3.0-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159310" comment="systemtap-runtime-3.0-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159311" comment="systemtap-server-3.0-10.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513422" comment="systemtap-3.0-20.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513423" comment="systemtap-runtime-3.0-20.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513424" comment="systemtap-server-3.0-20.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513592" comment="systemtap-3.0-15.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513593" comment="systemtap-runtime-3.0-15.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513594" comment="systemtap-server-3.0-15.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4306</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4306" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4306" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4306" ref_url="https://www.suse.com/security/cve/CVE-2009-4306" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel 2.6.32-git6 and earlier allows local users to cause a denial of service (filesystem corruption) via unknown vectors, a different vulnerability than CVE-2009-4131.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4306/">CVE-2009-4306</cve>
	<bugzilla href="https://bugzilla.suse.com/564380">SUSE bug 564380</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4307</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4307" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4307" ref_url="https://www.suse.com/security/cve/CVE-2009-4307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
    <description>
    The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4307/">CVE-2009-4307</cve>
	<bugzilla href="https://bugzilla.suse.com/564381">SUSE bug 564381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/757278">SUSE bug 757278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4308</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4308" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4308" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4308" ref_url="https://www.suse.com/security/cve/CVE-2009-4308" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
    <description>
    The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel before 2.6.32 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference), and possibly have unspecified other impact, via a crafted read-only filesystem that lacks a journal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4308/">CVE-2009-4308</cve>
	<bugzilla href="https://bugzilla.suse.com/564382">SUSE bug 564382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4355</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4355" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4355" ref_url="https://www.suse.com/security/cve/CVE-2009-4355" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html" source="SUSE-SU"/>
    <description>
    Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4355/">CVE-2009-4355</cve>
	<bugzilla href="https://bugzilla.suse.com/459468">SUSE bug 459468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/552497">SUSE bug 552497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/566238">SUSE bug 566238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4492</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4492" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4492" ref_url="https://www.suse.com/security/cve/CVE-2009-4492" source="SUSE CVE"/>
    <description>
    WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4492/">CVE-2009-4492</cve>
	<bugzilla href="https://bugzilla.suse.com/570616">SUSE bug 570616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/580482">SUSE bug 580482</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141123" comment="ruby-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144989" comment="ruby-devel-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147611" comment="ruby-2.1-1.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4536</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4536" ref_url="https://www.suse.com/security/cve/CVE-2009-4536" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
    <description>
    drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4536/">CVE-2009-4536</cve>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583434">SUSE bug 583434</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4537</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4537" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4537" ref_url="https://www.suse.com/security/cve/CVE-2009-4537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted size, in conjunction with certain packets containing A characters and certain packets containing E characters; or (2) cause a denial of service (system crash) via a packet with a crafted size, in conjunction with certain packets containing '\0' characters, related to the value of the status register and erroneous behavior associated with the RxMaxSize register.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1389.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-11"/>
	<updated date="2023-07-11"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4537/">CVE-2009-4537</cve>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4538</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-4538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-4538" ref_url="https://www.suse.com/security/cve/CVE-2009-4538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
    <description>
    drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-4538/">CVE-2009-4538</cve>
	<bugzilla href="https://bugzilla.suse.com/567376">SUSE bug 567376</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5028</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5028" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5028" ref_url="https://www.suse.com/security/cve/CVE-2009-5028" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in Namazu before 2.0.20 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted request containing an empty uri field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5028/">CVE-2009-5028</cve>
	<bugzilla href="https://bugzilla.suse.com/732322">SUSE bug 732322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5029</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5029" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5029" ref_url="https://www.suse.com/security/cve/CVE-2009-5029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0023-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0033-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0055-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-403" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5029/">CVE-2009-5029</cve>
	<bugzilla href="https://bugzilla.suse.com/735850">SUSE bug 735850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736174">SUSE bug 736174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/759836">SUSE bug 759836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826666">SUSE bug 826666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144776" comment="glibc-devel-static-2.19-17.72 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140628" comment="glibc-profile-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141386" comment="glibc-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141387" comment="glibc-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141388" comment="glibc-devel-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141389" comment="glibc-devel-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141390" comment="glibc-i18ndata-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141391" comment="glibc-locale-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141392" comment="glibc-locale-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141393" comment="nscd-2.19-17.72 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141386" comment="glibc-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141387" comment="glibc-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141388" comment="glibc-devel-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141389" comment="glibc-devel-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143193" comment="glibc-html-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141390" comment="glibc-i18ndata-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143194" comment="glibc-info-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141391" comment="glibc-locale-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141392" comment="glibc-locale-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143195" comment="glibc-profile-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143196" comment="glibc-profile-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141393" comment="nscd-2.19-17.72 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141868" comment="glibc-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141869" comment="glibc-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141870" comment="glibc-devel-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141871" comment="glibc-devel-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141872" comment="glibc-i18ndata-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141873" comment="glibc-locale-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141874" comment="glibc-locale-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141875" comment="nscd-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141868" comment="glibc-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141869" comment="glibc-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141870" comment="glibc-devel-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141871" comment="glibc-devel-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143333" comment="glibc-html-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141872" comment="glibc-i18ndata-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143334" comment="glibc-info-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141873" comment="glibc-locale-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141874" comment="glibc-locale-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143335" comment="glibc-profile-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143336" comment="glibc-profile-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141875" comment="nscd-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145037" comment="glibc-devel-static-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143334" comment="glibc-info-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145242" comment="glibc-devel-static-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156986" comment="glibc-html-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156988" comment="glibc-profile-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157048" comment="glibc-profile-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157042" comment="glibc-devel-static-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513507" comment="glibc-html-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513509" comment="glibc-profile-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513510" comment="glibc-profile-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512877" comment="glibc-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512878" comment="glibc-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512879" comment="glibc-devel-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512880" comment="glibc-devel-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512881" comment="glibc-html-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512882" comment="glibc-i18ndata-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512884" comment="glibc-locale-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512885" comment="glibc-locale-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512886" comment="glibc-profile-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512887" comment="glibc-profile-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512888" comment="nscd-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513676" comment="glibc-devel-static-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513980" comment="glibc-devel-static-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5044</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5044" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5044" ref_url="https://www.suse.com/security/cve/CVE-2009-5044" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0642-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00029.html" source="SUSE-SU"/>
    <description>
    contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5044/">CVE-2009-5044</cve>
	<bugzilla href="https://bugzilla.suse.com/698290">SUSE bug 698290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/703666">SUSE bug 703666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140645" comment="groff-1.22.2-5.429 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140645" comment="groff-1.22.2-5.429 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140646" comment="groff-full-1.22.2-5.429 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140647" comment="gxditview-1.22.2-5.429 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147525" comment="groff-1.22.2-5.287 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147526" comment="groff-full-1.22.2-5.287 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147527" comment="gxditview-1.22.2-5.287 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5080</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5080" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5080" ref_url="https://www.suse.com/security/cve/CVE-2009-5080" source="SUSE CVE"/>
    <description>
    The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5080/">CVE-2009-5080</cve>
	<bugzilla href="https://bugzilla.suse.com/703665">SUSE bug 703665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140645" comment="groff-1.22.2-5.429 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140645" comment="groff-1.22.2-5.429 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140646" comment="groff-full-1.22.2-5.429 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140647" comment="gxditview-1.22.2-5.429 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147525" comment="groff-1.22.2-5.287 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147526" comment="groff-full-1.22.2-5.287 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147527" comment="gxditview-1.22.2-5.287 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5081</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5081" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5081" ref_url="https://www.suse.com/security/cve/CVE-2009-5081" source="SUSE CVE"/>
    <description>
    The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5081/">CVE-2009-5081</cve>
	<bugzilla href="https://bugzilla.suse.com/703666">SUSE bug 703666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140645" comment="groff-1.22.2-5.429 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140645" comment="groff-1.22.2-5.429 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140646" comment="groff-full-1.22.2-5.429 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140647" comment="gxditview-1.22.2-5.429 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147525" comment="groff-1.22.2-5.287 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147526" comment="groff-full-1.22.2-5.287 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147527" comment="gxditview-1.22.2-5.287 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5146</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5146" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5146" ref_url="https://www.suse.com/security/cve/CVE-2009-5146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001299.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0545-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-March/001309.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0553-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00024.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5146/">CVE-2009-5146</cve>
	<bugzilla href="https://bugzilla.suse.com/915976">SUSE bug 915976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919648">SUSE bug 919648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922647">SUSE bug 922647</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514602" comment="libopenssl0_9_8-0.9.8j-73.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514603" comment="libopenssl0_9_8-32bit-0.9.8j-73.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009524931" comment="libopenssl0_9_8-0.9.8j-73.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009524932" comment="libopenssl0_9_8-32bit-0.9.8j-73.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5147</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5147" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5147" ref_url="https://www.suse.com/security/cve/CVE-2009-5147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-November/001661.html" source="SUSE-SU"/>
    <description>
    DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2009-5147/">CVE-2009-5147</cve>
	<bugzilla href="https://bugzilla.suse.com/939860">SUSE bug 939860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/959495">SUSE bug 959495</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335698" comment="ruby-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336560" comment="libruby2_1-2_1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334192" comment="ruby2.1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336561" comment="ruby2.1-stdlib is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335696" comment="libruby2_1-2_1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334051" comment="ruby2.1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335697" comment="ruby2.1-stdlib is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5155</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2009-5155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5155" source="CVE"/>
    <reference ref_id="SUSE CVE-2009-5155" ref_url="https://www.suse.com/security/cve/CVE-2009-5155" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:699-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006343.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006363.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:740-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006431.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006438.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006701.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006702.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006703.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006704.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006705.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006950.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:201-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006955.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006961.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006998.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:54-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006484.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:91-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006623.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:92-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006621.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-April/005411.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005729.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005745.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1958-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005821.html" source="SUSE-SU"/>
    <description>
    In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2009-5155/">CVE-2009-5155</cve>
	<bugzilla href="https://bugzilla.suse.com/1127223">SUSE bug 1127223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-pos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512877" comment="glibc-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512878" comment="glibc-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512879" comment="glibc-devel-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512880" comment="glibc-devel-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512881" comment="glibc-html-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512882" comment="glibc-i18ndata-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512884" comment="glibc-locale-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512885" comment="glibc-locale-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512886" comment="glibc-profile-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512887" comment="glibc-profile-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512888" comment="nscd-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009521815" comment="glibc-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009521816" comment="glibc-32bit-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009521817" comment="glibc-devel-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009521818" comment="glibc-devel-32bit-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009521819" comment="glibc-i18ndata-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009521820" comment="glibc-locale-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009521821" comment="glibc-locale-32bit-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009521822" comment="nscd-2.22-100.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156852" comment="SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009530595" comment="glibc-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530596" comment="glibc-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530597" comment="glibc-devel-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530598" comment="glibc-devel-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530599" comment="glibc-html-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530600" comment="glibc-i18ndata-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530601" comment="glibc-info-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530602" comment="glibc-locale-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530603" comment="glibc-locale-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530604" comment="glibc-profile-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530605" comment="glibc-profile-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530606" comment="nscd-2.22-62.22.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009537022" comment="glibc-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530596" comment="glibc-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009537023" comment="glibc-devel-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530598" comment="glibc-devel-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530599" comment="glibc-html-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530600" comment="glibc-i18ndata-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530601" comment="glibc-info-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009537024" comment="glibc-locale-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530603" comment="glibc-locale-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009537025" comment="glibc-profile-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530605" comment="glibc-profile-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009537026" comment="nscd-2.22-62.22.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009542169" comment="glibc-devel-static-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009542170" comment="glibc-info-2.22-100.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009551189" comment="glibc-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551190" comment="glibc-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551191" comment="glibc-devel-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551192" comment="glibc-devel-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530599" comment="glibc-html-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530600" comment="glibc-i18ndata-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530601" comment="glibc-info-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551193" comment="glibc-locale-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551194" comment="glibc-locale-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551195" comment="glibc-profile-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551196" comment="glibc-profile-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551197" comment="nscd-2.22-62.22.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009554246" comment="glibc-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551190" comment="glibc-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009554247" comment="glibc-devel-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551192" comment="glibc-devel-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530599" comment="glibc-html-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530600" comment="glibc-i18ndata-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530601" comment="glibc-info-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009554248" comment="glibc-locale-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551194" comment="glibc-locale-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009554249" comment="glibc-profile-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551196" comment="glibc-profile-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009554250" comment="nscd-2.22-62.22.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009555971" comment="glibc-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530596" comment="glibc-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009555972" comment="glibc-devel-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530598" comment="glibc-devel-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530599" comment="glibc-html-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530600" comment="glibc-i18ndata-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530601" comment="glibc-info-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009555973" comment="glibc-locale-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530603" comment="glibc-locale-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009555974" comment="glibc-profile-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009530605" comment="glibc-profile-32bit-2.22-62.22.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009555975" comment="nscd-2.22-62.22.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009557897" comment="glibc-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557898" comment="glibc-32bit-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557899" comment="glibc-devel-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557900" comment="glibc-devel-32bit-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557901" comment="glibc-html-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009521819" comment="glibc-i18ndata-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009542170" comment="glibc-info-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557902" comment="glibc-locale-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557903" comment="glibc-locale-32bit-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557904" comment="glibc-profile-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557905" comment="glibc-profile-32bit-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557906" comment="nscd-2.22-100.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792113" comment="glibc-devel-static-2.22-100.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792114" comment="glibc-info-2.22-100.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0001</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0001" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0001" ref_url="https://www.suse.com/security/cve/CVE-2010-0001" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0001/">CVE-2010-0001</cve>
	<bugzilla href="https://bugzilla.suse.com/570331">SUSE bug 570331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/588113">SUSE bug 588113</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140677" comment="gzip-1.6-7.392 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147533" comment="gzip-1.6-7.209 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512188" comment="gzip-1.6-9.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512946" comment="gzip-1.10-2.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0003</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0003" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0003" ref_url="https://www.suse.com/security/cve/CVE-2010-0003" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
    <description>
    The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0003/">CVE-2010-0003</cve>
	<bugzilla href="https://bugzilla.suse.com/569902">SUSE bug 569902</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0006</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0006" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0006" ref_url="https://www.suse.com/security/cve/CVE-2010-0006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when network namespaces are enabled, allows remote attackers to cause a denial of service (NULL pointer dereference) via an invalid IPv6 jumbogram, a related issue to CVE-2007-4567.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0006/">CVE-2010-0006</cve>
	<bugzilla href="https://bugzilla.suse.com/570608">SUSE bug 570608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0007</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0007" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0007" ref_url="https://www.suse.com/security/cve/CVE-2010-0007" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
    <description>
    net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0007/">CVE-2010-0007</cve>
	<bugzilla href="https://bugzilla.suse.com/570602">SUSE bug 570602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/570606">SUSE bug 570606</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0008</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0008" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0008" ref_url="https://www.suse.com/security/cve/CVE-2010-0008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0008/">CVE-2010-0008</cve>
	<bugzilla href="https://bugzilla.suse.com/586195">SUSE bug 586195</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0013</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0013" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0013" ref_url="https://www.suse.com/security/cve/CVE-2010-0013" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00052.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0013/">CVE-2010-0013</cve>
	<bugzilla href="https://bugzilla.suse.com/567799">SUSE bug 567799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/569616">SUSE bug 569616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581201">SUSE bug 581201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0164</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0164" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0164" ref_url="https://www.suse.com/security/cve/CVE-2010-0164" source="SUSE CVE"/>
    <description>
    Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0164/">CVE-2010-0164</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0165</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0165" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0165" ref_url="https://www.suse.com/security/cve/CVE-2010-0165" source="SUSE CVE"/>
    <description>
    The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors involving certain indirect calls to the JavaScript eval function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0165/">CVE-2010-0165</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0166</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0166" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0166" ref_url="https://www.suse.com/security/cve/CVE-2010-0166" source="SUSE CVE"/>
    <description>
    The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0166/">CVE-2010-0166</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0167</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0167" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0167" ref_url="https://www.suse.com/security/cve/CVE-2010-0167" source="SUSE CVE"/>
    <description>
    The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0167/">CVE-2010-0167</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0168</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0168" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0168" ref_url="https://www.suse.com/security/cve/CVE-2010-0168" source="SUSE CVE"/>
    <description>
    The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image's URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser's add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0168/">CVE-2010-0168</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0169</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0169" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0169" ref_url="https://www.suse.com/security/cve/CVE-2010-0169" source="SUSE CVE"/>
    <description>
    The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0169/">CVE-2010-0169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0170</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0170" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0170" ref_url="https://www.suse.com/security/cve/CVE-2010-0170" source="SUSE CVE"/>
    <description>
    Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors that are specific to each affected plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0170/">CVE-2010-0170</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0171</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0171" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0171" ref_url="https://www.suse.com/security/cve/CVE-2010-0171" source="SUSE CVE"/>
    <description>
    Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0171/">CVE-2010-0171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0172</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0172" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0172" ref_url="https://www.suse.com/security/cve/CVE-2010-0172" source="SUSE CVE"/>
    <description>
    toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorization dialog and capture credentials by demanding HTTP authentication in opportunistic circumstances.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0172/">CVE-2010-0172</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0173</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0173" ref_url="https://www.suse.com/security/cve/CVE-2010-0173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0173/">CVE-2010-0173</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0174</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0174" ref_url="https://www.suse.com/security/cve/CVE-2010-0174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0174/">CVE-2010-0174</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0176</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0176" ref_url="https://www.suse.com/security/cve/CVE-2010-0176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0176/">CVE-2010-0176</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0177</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0177" ref_url="https://www.suse.com/security/cve/CVE-2010-0177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0177/">CVE-2010-0177</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0178</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0178" ref_url="https://www.suse.com/security/cve/CVE-2010-0178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0178/">CVE-2010-0178</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0181</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0181" ref_url="https://www.suse.com/security/cve/CVE-2010-0181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0181/">CVE-2010-0181</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0182" ref_url="https://www.suse.com/security/cve/CVE-2010-0182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0102-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0182/">CVE-2010-0182</cve>
	<bugzilla href="https://bugzilla.suse.com/586567">SUSE bug 586567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0186</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0186" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0186" ref_url="https://www.suse.com/security/cve/CVE-2010-0186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0130-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00019.html" source="SUSE-SU"/>
    <description>
    Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0186/">CVE-2010-0186</cve>
	<bugzilla href="https://bugzilla.suse.com/578997">SUSE bug 578997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/580470">SUSE bug 580470</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0187</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0187" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0187" ref_url="https://www.suse.com/security/cve/CVE-2010-0187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0187/">CVE-2010-0187</cve>
	<bugzilla href="https://bugzilla.suse.com/578997">SUSE bug 578997</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0209</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0209" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0209" ref_url="https://www.suse.com/security/cve/CVE-2010-0209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0502-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0573-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2213, CVE-2010-2214, and CVE-2010-2216.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0209/">CVE-2010-0209</cve>
	<bugzilla href="https://bugzilla.suse.com/630108">SUSE bug 630108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0277</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0277" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0277" ref_url="https://www.suse.com/security/cve/CVE-2010-0277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00052.html" source="SUSE-SU"/>
    <description>
    slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0277/">CVE-2010-0277</cve>
	<bugzilla href="https://bugzilla.suse.com/567799">SUSE bug 567799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/569616">SUSE bug 569616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581201">SUSE bug 581201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100280" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0280</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0280" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0280" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0280" ref_url="https://www.suse.com/security/cve/CVE-2010-0280" source="SUSE CVE"/>
    <description>
    Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0280/">CVE-2010-0280</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144787" comment="lib3ds-1-3-1.3.0-25.5 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0283</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0283" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0283" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0283" ref_url="https://www.suse.com/security/cve/CVE-2010-0283" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-02/msg00008.html" source="SUSE-SU"/>
    <description>
    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid (1) AS-REQ or (2) TGS-REQ request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0283/">CVE-2010-0283</cve>
	<bugzilla href="https://bugzilla.suse.com/571781">SUSE bug 571781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/576524">SUSE bug 576524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0307</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0307" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0307" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0307" ref_url="https://www.suse.com/security/cve/CVE-2010-0307" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00003.html" source="SUSE-SU"/>
    <description>
    The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0307/">CVE-2010-0307</cve>
	<bugzilla href="https://bugzilla.suse.com/575644">SUSE bug 575644</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0393</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0393" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0393" ref_url="https://www.suse.com/security/cve/CVE-2010-0393" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
    <description>
    The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0393/">CVE-2010-0393</cve>
	<bugzilla href="https://bugzilla.suse.com/574336">SUSE bug 574336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144726" comment="cups-devel-1.7.5-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141281" comment="cups-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141282" comment="cups-client-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141283" comment="cups-libs-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141284" comment="cups-libs-32bit-1.7.5-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147501" comment="cups154-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147502" comment="cups154-client-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147503" comment="cups154-filters-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147504" comment="cups154-libs-1.5.4-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513929" comment="cups-ddk-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513930" comment="cups-devel-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0397</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0397" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0397" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0397" ref_url="https://www.suse.com/security/cve/CVE-2010-0397" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0255-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
    <description>
    The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0397/">CVE-2010-0397</cve>
	<bugzilla href="https://bugzilla.suse.com/1099098">SUSE bug 1099098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/585480">SUSE bug 585480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/588975">SUSE bug 588975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0405</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0405" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0405" ref_url="https://www.suse.com/security/cve/CVE-2010-0405" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0684-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00058.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0405/">CVE-2010-0405</cve>
	<bugzilla href="https://bugzilla.suse.com/636978">SUSE bug 636978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646682">SUSE bug 646682</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144815" comment="libbz2-devel-1.0.6-27.1129 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145288" comment="libbz2-devel-1.0.6-29.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514053" comment="libbz2-devel-1.0.6-30.8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140483" comment="bzip2-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140484" comment="bzip2-doc-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140489" comment="clamav-0.99.2-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140485" comment="libbz2-1-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140486" comment="libbz2-1-32bit-1.0.6-29.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140483" comment="bzip2-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140484" comment="bzip2-doc-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140489" comment="clamav-0.99.2-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140485" comment="libbz2-1-1.0.6-29.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140483" comment="bzip2-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140484" comment="bzip2-doc-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157660" comment="clamav-0.99.2-32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140485" comment="libbz2-1-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140486" comment="libbz2-1-32bit-1.0.6-29.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140483" comment="bzip2-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140484" comment="bzip2-doc-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512064" comment="clamav-0.100.2-33.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140485" comment="libbz2-1-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140486" comment="libbz2-1-32bit-1.0.6-29.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140483" comment="bzip2-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140489" comment="clamav-0.99.2-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140485" comment="libbz2-1-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140486" comment="libbz2-1-32bit-1.0.6-29.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140483" comment="bzip2-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157660" comment="clamav-0.99.2-32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140485" comment="libbz2-1-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140486" comment="libbz2-1-32bit-1.0.6-29.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140483" comment="bzip2-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512064" comment="clamav-0.100.2-33.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140485" comment="libbz2-1-1.0.6-29.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140486" comment="libbz2-1-32bit-1.0.6-29.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141231" comment="bzip2-1.0.6-27.1129 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009109618" comment="clamav-0.98.7-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141232" comment="libbz2-1-1.0.6-27.1129 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141233" comment="libbz2-1-32bit-1.0.6-27.1129 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141231" comment="bzip2-1.0.6-27.1129 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141235" comment="clamav-0.98.4-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141232" comment="libbz2-1-1.0.6-27.1129 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141233" comment="libbz2-1-32bit-1.0.6-27.1129 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141231" comment="bzip2-1.0.6-27.1129 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150269" comment="bzip2-doc-1.0.6-27.1129 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009109618" comment="clamav-0.98.7-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141232" comment="libbz2-1-1.0.6-27.1129 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141233" comment="libbz2-1-32bit-1.0.6-27.1129 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143142" comment="bzip2-1.0.6-27.886 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143143" comment="bzip2-doc-1.0.6-27.886 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141235" comment="clamav-0.98.4-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143144" comment="libbz2-1-1.0.6-27.886 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141233" comment="libbz2-1-32bit-1.0.6-27.1129 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512744" comment="bzip2-1.0.6-30.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512745" comment="bzip2-doc-1.0.6-30.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512760" comment="clamav-0.101.3-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512746" comment="libbz2-1-1.0.6-30.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512747" comment="libbz2-1-32bit-1.0.6-30.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0407</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0407" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0407" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0407" ref_url="https://www.suse.com/security/cve/CVE-2010-0407" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00020.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0407/">CVE-2010-0407</cve>
	<bugzilla href="https://bugzilla.suse.com/609317">SUSE bug 609317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/641823">SUSE bug 641823</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141582" comment="libpcsclite1-32bit-1.8.10-3.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147771" comment="libpcsclite1-32bit-1.8.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512378" comment="libpcsclite1-32bit-1.8.10-7.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514305" comment="libpcsclite1-32bit-1.8.10-7.6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140900" comment="libpcsclite1-1.8.10-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140901" comment="pcsc-lite-1.8.10-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140900" comment="libpcsclite1-1.8.10-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141582" comment="libpcsclite1-32bit-1.8.10-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140901" comment="pcsc-lite-1.8.10-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144905" comment="libpcscspy0-1.8.10-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144906" comment="pcsc-lite-devel-1.8.10-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147574" comment="libpcsclite1-1.8.10-3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147575" comment="pcsc-lite-1.8.10-3.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147770" comment="libpcsclite1-1.8.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147771" comment="libpcsclite1-32bit-1.8.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147772" comment="pcsc-lite-1.8.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147770" comment="libpcsclite1-1.8.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147772" comment="pcsc-lite-1.8.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147773" comment="libpcscspy0-1.8.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147774" comment="pcsc-lite-devel-1.8.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512377" comment="libpcsclite1-1.8.10-7.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512378" comment="libpcsclite1-32bit-1.8.10-7.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512379" comment="pcsc-lite-1.8.10-7.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512377" comment="libpcsclite1-1.8.10-7.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512379" comment="pcsc-lite-1.8.10-7.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513200" comment="libpcsclite1-1.8.10-7.6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513201" comment="pcsc-lite-1.8.10-7.6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513768" comment="libpcscspy0-1.8.10-7.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513769" comment="pcsc-lite-devel-1.8.10-7.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514173" comment="libpcscspy0-1.8.10-7.6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514174" comment="pcsc-lite-devel-1.8.10-7.6.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0408</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0408" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0408" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0408" ref_url="https://www.suse.com/security/cve/CVE-2010-0408" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00084.html" source="SUSE-SU"/>
    <description>
    The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0408/">CVE-2010-0408</cve>
	<bugzilla href="https://bugzilla.suse.com/586572">SUSE bug 586572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/601151">SUSE bug 601151</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0410</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0410" ref_url="https://www.suse.com/security/cve/CVE-2010-0410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00053.html" source="SUSE-SU"/>
    <description>
    drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0410/">CVE-2010-0410</cve>
	<bugzilla href="https://bugzilla.suse.com/576927">SUSE bug 576927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/605463">SUSE bug 605463</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0411</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0411" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0411" ref_url="https://www.suse.com/security/cve/CVE-2010-0411" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0166-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00032.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0411/">CVE-2010-0411</cve>
	<bugzilla href="https://bugzilla.suse.com/574243">SUSE bug 574243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577382">SUSE bug 577382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144994" comment="systemtap-sdt-devel-2.5-1.55 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145186" comment="systemtap-sdt-devel-2.5-4.44 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145368" comment="systemtap-sdt-devel-3.0-7.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159840" comment="systemtap-sdt-devel-3.0-10.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513883" comment="systemtap-sdt-devel-3.0-15.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514253" comment="systemtap-sdt-devel-3.0-20.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141135" comment="systemtap-3.0-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141136" comment="systemtap-runtime-3.0-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141137" comment="systemtap-server-3.0-7.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143298" comment="systemtap-2.5-1.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143299" comment="systemtap-runtime-2.5-1.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143300" comment="systemtap-server-2.5-1.55 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143397" comment="systemtap-2.5-4.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143398" comment="systemtap-runtime-2.5-4.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143399" comment="systemtap-server-2.5-4.44 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159309" comment="systemtap-3.0-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159310" comment="systemtap-runtime-3.0-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159311" comment="systemtap-server-3.0-10.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513422" comment="systemtap-3.0-20.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513423" comment="systemtap-runtime-3.0-20.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513424" comment="systemtap-server-3.0-20.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513592" comment="systemtap-3.0-15.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513593" comment="systemtap-runtime-3.0-15.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513594" comment="systemtap-server-3.0-15.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0412</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0412" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0412" ref_url="https://www.suse.com/security/cve/CVE-2010-0412" source="SUSE CVE"/>
    <description>
    stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0412/">CVE-2010-0412</cve>
	<bugzilla href="https://bugzilla.suse.com/574243">SUSE bug 574243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144994" comment="systemtap-sdt-devel-2.5-1.55 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145186" comment="systemtap-sdt-devel-2.5-4.44 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145368" comment="systemtap-sdt-devel-3.0-7.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159840" comment="systemtap-sdt-devel-3.0-10.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513883" comment="systemtap-sdt-devel-3.0-15.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514253" comment="systemtap-sdt-devel-3.0-20.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141135" comment="systemtap-3.0-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141136" comment="systemtap-runtime-3.0-7.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141137" comment="systemtap-server-3.0-7.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143298" comment="systemtap-2.5-1.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143299" comment="systemtap-runtime-2.5-1.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143300" comment="systemtap-server-2.5-1.55 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143397" comment="systemtap-2.5-4.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143398" comment="systemtap-runtime-2.5-4.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143399" comment="systemtap-server-2.5-4.44 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159309" comment="systemtap-3.0-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159310" comment="systemtap-runtime-3.0-10.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159311" comment="systemtap-server-3.0-10.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513422" comment="systemtap-3.0-20.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513423" comment="systemtap-runtime-3.0-20.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513424" comment="systemtap-server-3.0-20.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513592" comment="systemtap-3.0-15.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513593" comment="systemtap-runtime-3.0-15.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513594" comment="systemtap-server-3.0-15.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0415</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0415" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0415" ref_url="https://www.suse.com/security/cve/CVE-2010-0415" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0415/">CVE-2010-0415</cve>
	<bugzilla href="https://bugzilla.suse.com/577753">SUSE bug 577753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0420</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0420" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0420" ref_url="https://www.suse.com/security/cve/CVE-2010-0420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00052.html" source="SUSE-SU"/>
    <description>
    libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing &lt;br&gt; sequences, which allows remote attackers to cause a denial of service (application crash) via a crafted nickname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0420/">CVE-2010-0420</cve>
	<bugzilla href="https://bugzilla.suse.com/569616">SUSE bug 569616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581201">SUSE bug 581201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0423</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0423" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0423" ref_url="https://www.suse.com/security/cve/CVE-2010-0423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00052.html" source="SUSE-SU"/>
    <description>
    gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0423/">CVE-2010-0423</cve>
	<bugzilla href="https://bugzilla.suse.com/569616">SUSE bug 569616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581201">SUSE bug 581201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0424</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0424" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0424" ref_url="https://www.suse.com/security/cve/CVE-2010-0424" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
    <description>
    The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-0424/">CVE-2010-0424</cve>
	<bugzilla href="https://bugzilla.suse.com/579447">SUSE bug 579447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/580800">SUSE bug 580800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/589640">SUSE bug 589640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/590353">SUSE bug 590353</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140508" comment="cron-4.2-58.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140509" comment="cronie-1.4.11-58.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141279" comment="cron-4.2-55.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141280" comment="cronie-1.4.11-55.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512773" comment="cron-4.2-59.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512774" comment="cronie-1.4.11-59.10.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0425</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0425" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0425" ref_url="https://www.suse.com/security/cve/CVE-2010-0425" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003365.html" source="SUSE-SU"/>
    <description>
    modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0425/">CVE-2010-0425</cve>
	<bugzilla href="https://bugzilla.suse.com/1078450">SUSE bug 1078450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/586572">SUSE bug 586572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/601151">SUSE bug 601151</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0434</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0434" ref_url="https://www.suse.com/security/cve/CVE-2010-0434" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00084.html" source="SUSE-SU"/>
    <description>
    The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0434/">CVE-2010-0434</cve>
	<bugzilla href="https://bugzilla.suse.com/586572">SUSE bug 586572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/601151">SUSE bug 601151</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0540</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0540" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0540" ref_url="https://www.suse.com/security/cve/CVE-2010-0540" source="SUSE CVE"/>
    <description>
    Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0540/">CVE-2010-0540</cve>
	<bugzilla href="https://bugzilla.suse.com/601830">SUSE bug 601830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/671735">SUSE bug 671735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680210">SUSE bug 680210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680212">SUSE bug 680212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/700987">SUSE bug 700987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711490">SUSE bug 711490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/715643">SUSE bug 715643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/748422">SUSE bug 748422</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144726" comment="cups-devel-1.7.5-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141281" comment="cups-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141282" comment="cups-client-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141283" comment="cups-libs-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141284" comment="cups-libs-32bit-1.7.5-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147501" comment="cups154-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147502" comment="cups154-client-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147503" comment="cups154-filters-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147504" comment="cups154-libs-1.5.4-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513929" comment="cups-ddk-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513930" comment="cups-devel-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0541</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0541" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0541" ref_url="https://www.suse.com/security/cve/CVE-2010-0541" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0561-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00060.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0541/">CVE-2010-0541</cve>
	<bugzilla href="https://bugzilla.suse.com/600752">SUSE bug 600752</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141123" comment="ruby-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144989" comment="ruby-devel-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147611" comment="ruby-2.1-1.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0542</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0542" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0542" ref_url="https://www.suse.com/security/cve/CVE-2010-0542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1018-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0542/">CVE-2010-0542</cve>
	<bugzilla href="https://bugzilla.suse.com/601352">SUSE bug 601352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/644521">SUSE bug 644521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/657780">SUSE bug 657780</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144726" comment="cups-devel-1.7.5-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141281" comment="cups-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141282" comment="cups-client-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141283" comment="cups-libs-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141284" comment="cups-libs-32bit-1.7.5-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147501" comment="cups154-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147502" comment="cups154-client-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147503" comment="cups154-filters-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147504" comment="cups154-libs-1.5.4-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513929" comment="cups-ddk-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513930" comment="cups-devel-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0547</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0547" ref_url="https://www.suse.com/security/cve/CVE-2010-0547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
    <description>
    client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0547/">CVE-2010-0547</cve>
	<bugzilla href="https://bugzilla.suse.com/577868">SUSE bug 577868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577925">SUSE bug 577925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583535">SUSE bug 583535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/583536">SUSE bug 583536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/594263">SUSE bug 594263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/597421">SUSE bug 597421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/602694">SUSE bug 602694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/709819">SUSE bug 709819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141234" comment="cifs-utils-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141851" comment="cifs-utils-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144723" comment="cifs-utils-devel-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145019" comment="cifs-utils-devel-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512063" comment="cifs-utils-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512759" comment="cifs-utils-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513638" comment="cifs-utils-devel-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513927" comment="cifs-utils-devel-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0623</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0623" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0623" ref_url="https://www.suse.com/security/cve/CVE-2010-0623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0205-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0623/">CVE-2010-0623</cve>
	<bugzilla href="https://bugzilla.suse.com/579439">SUSE bug 579439</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0624</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0624" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0624" ref_url="https://www.suse.com/security/cve/CVE-2010-0624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0189-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00044.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0624/">CVE-2010-0624</cve>
	<bugzilla href="https://bugzilla.suse.com/579475">SUSE bug 579475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/608034">SUSE bug 608034</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338991" comment="cpio is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102938" comment="cpio-2.11-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102939" comment="cpio-lang-2.11-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136443" comment="tar-1.27.1-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136445" comment="tar-lang-1.27.1-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102938" comment="cpio-2.11-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102939" comment="cpio-lang-2.11-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009139103" comment="tar-1.27.1-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009139104" comment="tar-lang-1.27.1-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141245" comment="cpio-2.11-26.182 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141246" comment="cpio-lang-2.11-26.182 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141247" comment="tar-1.27.1-2.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141248" comment="tar-lang-1.27.1-2.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158948" comment="cpio-2.11-35.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158949" comment="cpio-lang-2.11-35.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159313" comment="tar-1.27.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159314" comment="tar-lang-1.27.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338991" comment="cpio is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715283" comment="cpio-lang is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512068" comment="cpio-2.11-36.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512069" comment="cpio-lang-2.11-36.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512622" comment="tar-1.27.1-15.3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512623" comment="tar-lang-1.27.1-15.3.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0628</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0628" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0628" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0628" ref_url="https://www.suse.com/security/cve/CVE-2010-0628" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
    <description>
    The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2 and 1.8 before 1.8.1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid packet that triggers incorrect preparation of an error token.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0628/">CVE-2010-0628</cve>
	<bugzilla href="https://bugzilla.suse.com/582557">SUSE bug 582557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/586981">SUSE bug 586981</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0654</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0654" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0654" ref_url="https://www.suse.com/security/cve/CVE-2010-0654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-4" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0654/">CVE-2010-0654</cve>
	<bugzilla href="https://bugzilla.suse.com/583603">SUSE bug 583603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0728</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0728" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0728" ref_url="https://www.suse.com/security/cve/CVE-2010-0728" source="SUSE CVE"/>
    <description>
    smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0728/">CVE-2010-0728</cve>
	<bugzilla href="https://bugzilla.suse.com/586683">SUSE bug 586683</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141234" comment="cifs-utils-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141851" comment="cifs-utils-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144723" comment="cifs-utils-devel-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145019" comment="cifs-utils-devel-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512063" comment="cifs-utils-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512759" comment="cifs-utils-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513638" comment="cifs-utils-devel-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513927" comment="cifs-utils-devel-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0730</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0730" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0730" ref_url="https://www.suse.com/security/cve/CVE-2010-0730" source="SUSE CVE"/>
    <description>
    The MMIO instruction decoder in the Xen hypervisor in the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows guest OS users to cause a denial of service (32-bit guest OS crash) via vectors that trigger an unspecified instruction emulation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-0730/">CVE-2010-0730</cve>
	<bugzilla href="https://bugzilla.suse.com/601231">SUSE bug 601231</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0740</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0740" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0740" ref_url="https://www.suse.com/security/cve/CVE-2010-0740" source="SUSE CVE"/>
    <description>
    The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0740/">CVE-2010-0740</cve>
	<bugzilla href="https://bugzilla.suse.com/590833">SUSE bug 590833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0741</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0741" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0741" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0741" ref_url="https://www.suse.com/security/cve/CVE-2010-0741" source="SUSE CVE"/>
    <description>
    The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0741/">CVE-2010-0741</cve>
	<bugzilla href="https://bugzilla.suse.com/596032">SUSE bug 596032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0742</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0742" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0742" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0742" ref_url="https://www.suse.com/security/cve/CVE-2010-0742" source="SUSE CVE"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
    <description>
    The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0742/">CVE-2010-0742</cve>
	<bugzilla href="https://bugzilla.suse.com/610642">SUSE bug 610642</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0750</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0750" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0750" ref_url="https://www.suse.com/security/cve/CVE-2010-0750" source="SUSE CVE"/>
    <description>
    pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0750/">CVE-2010-0750</cve>
	<bugzilla href="https://bugzilla.suse.com/593959">SUSE bug 593959</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115372" comment="libpolkit0-32bit-0.113-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115374" comment="polkit-devel-0.113-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141588" comment="libpolkit0-32bit-0.112-2.189 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142141" comment="libpolkit0-32bit-0.113-5.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144983" comment="polkit-devel-0.112-2.189 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145361" comment="polkit-devel-0.113-5.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512382" comment="libpolkit0-32bit-0.113-5.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513871" comment="polkit-devel-0.113-5.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514240" comment="polkit-devel-0.113-5.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514307" comment="libpolkit0-32bit-0.113-5.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115371" comment="libpolkit0-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115372" comment="libpolkit0-32bit-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115373" comment="polkit-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115376" comment="typelib-1_0-Polkit-1_0-0.113-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115371" comment="libpolkit0-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115373" comment="polkit-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115376" comment="typelib-1_0-Polkit-1_0-0.113-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140902" comment="libpolkit0-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140903" comment="polkit-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140904" comment="typelib-1_0-Polkit-1_0-0.113-5.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140902" comment="libpolkit0-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142141" comment="libpolkit0-32bit-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140903" comment="polkit-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140904" comment="typelib-1_0-Polkit-1_0-0.113-5.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141587" comment="libpolkit0-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141588" comment="libpolkit0-32bit-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141589" comment="polkit-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141590" comment="typelib-1_0-Polkit-1_0-0.112-2.189 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141587" comment="libpolkit0-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141589" comment="polkit-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141590" comment="typelib-1_0-Polkit-1_0-0.112-2.189 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512381" comment="libpolkit0-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512382" comment="libpolkit0-32bit-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512383" comment="polkit-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512384" comment="typelib-1_0-Polkit-1_0-0.113-5.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512381" comment="libpolkit0-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512383" comment="polkit-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512384" comment="typelib-1_0-Polkit-1_0-0.113-5.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513202" comment="libpolkit0-0.113-5.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513203" comment="polkit-0.113-5.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513204" comment="typelib-1_0-Polkit-1_0-0.113-5.18.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0771</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0771" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0771" ref_url="https://www.suse.com/security/cve/CVE-2010-0771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-3552.  Reason: This candidate is a reservation duplicate of CVE-2010-3552.  Notes: All CVE users should reference CVE-2010-3552 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-0771/">CVE-2010-0771</cve>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0787</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0787" ref_url="https://www.suse.com/security/cve/CVE-2010-0787" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
    <description>
    client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0787/">CVE-2010-0787</cve>
	<bugzilla href="https://bugzilla.suse.com/550002">SUSE bug 550002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/602694">SUSE bug 602694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/620680">SUSE bug 620680</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141234" comment="cifs-utils-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141851" comment="cifs-utils-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144723" comment="cifs-utils-devel-6.4-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145019" comment="cifs-utils-devel-6.4-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512063" comment="cifs-utils-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512759" comment="cifs-utils-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513638" comment="cifs-utils-devel-6.5-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513927" comment="cifs-utils-devel-6.9-9.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0831</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0831" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0831" ref_url="https://www.suse.com/security/cve/CVE-2010-0831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1632-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000621.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0831/">CVE-2010-0831</cve>
	<bugzilla href="https://bugzilla.suse.com/1188517">SUSE bug 1188517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607043">SUSE bug 607043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/607762">SUSE bug 607762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/818591">SUSE bug 818591</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625483" comment="fastjar is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0926</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-0926" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-0926" ref_url="https://www.suse.com/security/cve/CVE-2010-0926" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
    <description>
    The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-0926/">CVE-2010-0926</cve>
	<bugzilla href="https://bugzilla.suse.com/1027147">SUSE bug 1027147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577868">SUSE bug 577868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/597421">SUSE bug 597421</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1028</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1028" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1028" ref_url="https://www.suse.com/security/cve/CVE-2010-1028" source="SUSE CVE"/>
    <description>
    Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before 3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a buffer overflow, as demonstrated by the vd_ff module in VulnDisco 9.0.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1028/">CVE-2010-1028</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1121</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1121" ref_url="https://www.suse.com/security/cve/CVE-2010-1121" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1121/">CVE-2010-1121</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1125</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1125" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1125" ref_url="https://www.suse.com/security/cve/CVE-2010-1125" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
    <description>
    The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1125/">CVE-2010-1125</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1146</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1146" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1146" ref_url="https://www.suse.com/security/cve/CVE-2010-1146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfs_priv directory, which allows local users to gain privileges by modifying (1) extended attributes or (2) ACLs, as demonstrated by deleting a file under .reiserfs_priv/xattrs/.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1146/">CVE-2010-1146</cve>
	<bugzilla href="https://bugzilla.suse.com/593906">SUSE bug 593906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1148</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1148" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1148" ref_url="https://www.suse.com/security/cve/CVE-2010-1148" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a NULL nameidata (aka nd) field in a POSIX file-creation request to a server that supports UNIX extensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1148/">CVE-2010-1148</cve>
	<bugzilla href="https://bugzilla.suse.com/593940">SUSE bug 593940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1162</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1162" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1162" ref_url="https://www.suse.com/security/cve/CVE-2010-1162" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the put_pid function, which has unspecified impact and local attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-1162/">CVE-2010-1162</cve>
	<bugzilla href="https://bugzilla.suse.com/596462">SUSE bug 596462</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1163</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1163" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1163" ref_url="https://www.suse.com/security/cve/CVE-2010-1163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0050-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00022.html" source="SUSE-SU"/>
    <description>
    The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1163/">CVE-2010-1163</cve>
	<bugzilla href="https://bugzilla.suse.com/594738">SUSE bug 594738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141130" comment="sudo-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141810" comment="sudo-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144993" comment="sudo-devel-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145367" comment="sudo-devel-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159307" comment="sudo-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159839" comment="sudo-devel-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512620" comment="sudo-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513418" comment="sudo-1.8.27-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513882" comment="sudo-devel-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514252" comment="sudo-devel-1.8.27-2.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1167</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1167" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1167" ref_url="https://www.suse.com/security/cve/CVE-2010-1167" source="SUSE CVE"/>
    <description>
    fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1167/">CVE-2010-1167</cve>
	<bugzilla href="https://bugzilla.suse.com/597673">SUSE bug 597673</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140570" comment="fetchmailconf-6.3.26-12.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150270" comment="fetchmailconf-6.3.26-5.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143172" comment="fetchmail-6.3.26-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143173" comment="fetchmailconf-6.3.26-5.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1169</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1169" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1169" ref_url="https://www.suse.com/security/cve/CVE-2010-1169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00010.html" source="SUSE-SU"/>
    <description>
    PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-1169/">CVE-2010-1169</cve>
	<bugzilla href="https://bugzilla.suse.com/605926">SUSE bug 605926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648140">SUSE bug 648140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1170</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1170" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1170" ref_url="https://www.suse.com/security/cve/CVE-2010-1170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00010.html" source="SUSE-SU"/>
    <description>
    The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1170/">CVE-2010-1170</cve>
	<bugzilla href="https://bugzilla.suse.com/605845">SUSE bug 605845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/605926">SUSE bug 605926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/634562">SUSE bug 634562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648140">SUSE bug 648140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1172</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1172" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1172" ref_url="https://www.suse.com/security/cve/CVE-2010-1172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0968-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0300-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0300-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00025.html" source="SUSE-SU"/>
    <description>
    DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1172/">CVE-2010-1172</cve>
	<bugzilla href="https://bugzilla.suse.com/628607">SUSE bug 628607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633621">SUSE bug 633621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633622">SUSE bug 633622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633623">SUSE bug 633623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633629">SUSE bug 633629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633637">SUSE bug 633637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633639">SUSE bug 633639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633648">SUSE bug 633648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633652">SUSE bug 633652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633653">SUSE bug 633653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633654">SUSE bug 633654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633658">SUSE bug 633658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633660">SUSE bug 633660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633678">SUSE bug 633678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633679">SUSE bug 633679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633681">SUSE bug 633681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633682">SUSE bug 633682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633685">SUSE bug 633685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633686">SUSE bug 633686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633700">SUSE bug 633700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633701">SUSE bug 633701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633702">SUSE bug 633702</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140539" comment="dbus-1-glib-0.100.2-3.58 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144730" comment="dbus-1-glib-devel-0.100.2-3.58 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140539" comment="dbus-1-glib-0.100.2-3.58 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140540" comment="dbus-1-glib-32bit-0.100.2-3.58 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1173</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1173" ref_url="https://www.suse.com/security/cve/CVE-2010-1173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-1173/">CVE-2010-1173</cve>
	<bugzilla href="https://bugzilla.suse.com/600375">SUSE bug 600375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/702025">SUSE bug 702025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941110">SUSE bug 941110</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1188</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1188" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1188" ref_url="https://www.suse.com/security/cve/CVE-2010-1188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled and causes the skb structure to be freed.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-1188/">CVE-2010-1188</cve>
	<bugzilla href="https://bugzilla.suse.com/592571">SUSE bug 592571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1196</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1196" ref_url="https://www.suse.com/security/cve/CVE-2010-1196" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1196/">CVE-2010-1196</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1197</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1197" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1197" ref_url="https://www.suse.com/security/cve/CVE-2010-1197" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1197/">CVE-2010-1197</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1198</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1198" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1198" ref_url="https://www.suse.com/security/cve/CVE-2010-1198" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1198/">CVE-2010-1198</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1199</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1199" ref_url="https://www.suse.com/security/cve/CVE-2010-1199" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1199/">CVE-2010-1199</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1200</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1200" ref_url="https://www.suse.com/security/cve/CVE-2010-1200" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1200/">CVE-2010-1200</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1201</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1201" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1201" ref_url="https://www.suse.com/security/cve/CVE-2010-1201" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1201/">CVE-2010-1201</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1202</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1202" ref_url="https://www.suse.com/security/cve/CVE-2010-1202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1202/">CVE-2010-1202</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1203</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1203" ref_url="https://www.suse.com/security/cve/CVE-2010-1203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:030" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1203/">CVE-2010-1203</cve>
	<bugzilla href="https://bugzilla.suse.com/603356">SUSE bug 603356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617399">SUSE bug 617399</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1205</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1205" ref_url="https://www.suse.com/security/cve/CVE-2010-1205" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-4" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0594-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-1205/">CVE-2010-1205</cve>
	<bugzilla href="https://bugzilla.suse.com/1188284">SUSE bug 1188284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617866">SUSE bug 617866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/639941">SUSE bug 639941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105438" comment="libpng16-16-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105439" comment="libpng16-16-32bit-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144907" comment="libpng12-compat-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144908" comment="libpng12-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105440" comment="libpng16-compat-devel-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105442" comment="libpng16-devel-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119222" comment="libpng12-0-32bit-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119225" comment="libpng16-16-32bit-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119234" comment="libpng12-compat-devel-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119235" comment="libpng12-devel-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119236" comment="libpng16-compat-devel-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119237" comment="libpng16-devel-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141585" comment="libpng16-16-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141586" comment="libpng16-16-32bit-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144907" comment="libpng12-compat-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144908" comment="libpng12-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144909" comment="libpng16-compat-devel-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144910" comment="libpng16-devel-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149948" comment="libpng16-16-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149949" comment="libpng16-16-32bit-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150210" comment="libpng16-compat-devel-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150211" comment="libpng16-devel-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149948" comment="libpng16-16-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149949" comment="libpng16-16-32bit-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149948" comment="libpng16-16-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149949" comment="libpng16-16-32bit-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150210" comment="libpng16-compat-devel-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150211" comment="libpng16-devel-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150210" comment="libpng16-compat-devel-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150211" comment="libpng16-devel-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1206</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1206" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1206" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1206" ref_url="https://www.suse.com/security/cve/CVE-2010-1206" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1206/">CVE-2010-1206</cve>
	<bugzilla href="https://bugzilla.suse.com/618183">SUSE bug 618183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1207</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1207" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1207" ref_url="https://www.suse.com/security/cve/CVE-2010-1207" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1207/">CVE-2010-1207</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1208</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1208" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1208" ref_url="https://www.suse.com/security/cve/CVE-2010-1208" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1208/">CVE-2010-1208</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1209</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1209" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1209" ref_url="https://www.suse.com/security/cve/CVE-2010-1209" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator interface and a javascript callback.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1209/">CVE-2010-1209</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1210</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1210" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1210" ref_url="https://www.suse.com/security/cve/CVE-2010-1210" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1210/">CVE-2010-1210</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1211</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1211" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1211" ref_url="https://www.suse.com/security/cve/CVE-2010-1211" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1211/">CVE-2010-1211</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1212</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1212" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1212" ref_url="https://www.suse.com/security/cve/CVE-2010-1212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) propagation of deep aborts in the TraceRecorder::record_JSOP_BINDNAME function, (2) depth handling in the TraceRecorder::record_JSOP_GETELEM function, and (3) tracing of out-of-range arguments in the TraceRecorder::record_JSOP_ARGSUB function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1212/">CVE-2010-1212</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1213</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1213" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1213" ref_url="https://www.suse.com/security/cve/CVE-2010-1213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-4" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1213/">CVE-2010-1213</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1214</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1214" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1214" ref_url="https://www.suse.com/security/cve/CVE-2010-1214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1214/">CVE-2010-1214</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1215</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1215" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1215" ref_url="https://www.suse.com/security/cve/CVE-2010-1215" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging "access to an object from the chrome scope."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1215/">CVE-2010-1215</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1297</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1297" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1297" ref_url="https://www.suse.com/security/cve/CVE-2010-1297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0359-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00005.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1297/">CVE-2010-1297</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/612064">SUSE bug 612064</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101320" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1320</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1320" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1320" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1320" ref_url="https://www.suse.com/security/cve/CVE-2010-1320" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0147-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-04/msg00026.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x before 1.8.2 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a request associated with (1) renewal or (2) validation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-1320/">CVE-2010-1320</cve>
	<bugzilla href="https://bugzilla.suse.com/596002">SUSE bug 596002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1321</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1321" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1321" ref_url="https://www.suse.com/security/cve/CVE-2010-1321" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0292-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-05/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-1321/">CVE-2010-1321</cve>
	<bugzilla href="https://bugzilla.suse.com/596826">SUSE bug 596826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/611090">SUSE bug 611090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/658525">SUSE bug 658525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663953">SUSE bug 663953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679560">SUSE bug 679560</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1322</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1322" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1322" ref_url="https://www.suse.com/security/cve/CVE-2010-1322" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0709-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00006.html" source="SUSE-SU"/>
    <description>
    The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service (daemon crash), or possibly obtain sensitive information, spoof authorization, or execute arbitrary code, via a TGS request that triggers an uninitialized pointer dereference, as demonstrated by a request from a Windows Active Directory client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1322/">CVE-2010-1322</cve>
	<bugzilla href="https://bugzilla.suse.com/640990">SUSE bug 640990</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1323</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1323" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1323" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1323" ref_url="https://www.suse.com/security/cve/CVE-2010-1323" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7008287" ref_url="https://www.suse.com/support/kb/doc/?id=7008287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1053-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00030.html" source="SUSE-SU"/>
    <description>
    MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2010-1323/">CVE-2010-1323</cve>
	<bugzilla href="https://bugzilla.suse.com/650650">SUSE bug 650650</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1324</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1324" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1324" ref_url="https://www.suse.com/security/cve/CVE-2010-1324" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7008287" ref_url="https://www.suse.com/support/kb/doc/?id=7008287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1053-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00030.html" source="SUSE-SU"/>
    <description>
    MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2010-1324/">CVE-2010-1324</cve>
	<bugzilla href="https://bugzilla.suse.com/650650">SUSE bug 650650</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1436</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1436" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1436" ref_url="https://www.suse.com/security/cve/CVE-2010-1436" source="SUSE CVE"/>
    <description>
    gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate pages, which allows local users to cause a denial of service (kernel panic) via certain manipulations that cause an out-of-bounds write, as demonstrated by writing from an ext3 file system to a gfs2 file system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1436/">CVE-2010-1436</cve>
	<bugzilla href="https://bugzilla.suse.com/599957">SUSE bug 599957</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1437</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1437" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1437" ref_url="https://www.suse.com/security/cve/CVE-2010-1437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-1437/">CVE-2010-1437</cve>
	<bugzilla href="https://bugzilla.suse.com/599955">SUSE bug 599955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1449</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1449" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1449" ref_url="https://www.suse.com/security/cve/CVE-2010-1449" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
    <description>
    Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-1449/">CVE-2010-1449</cve>
	<bugzilla href="https://bugzilla.suse.com/603255">SUSE bug 603255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/666027">SUSE bug 666027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1450</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1450" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1450" ref_url="https://www.suse.com/security/cve/CVE-2010-1450" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-1450/">CVE-2010-1450</cve>
	<bugzilla href="https://bugzilla.suse.com/603255">SUSE bug 603255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/666027">SUSE bug 666027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1452</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1452" ref_url="https://www.suse.com/security/cve/CVE-2010-1452" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1000-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html" source="SUSE-SU"/>
    <description>
    The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1452/">CVE-2010-1452</cve>
	<bugzilla href="https://bugzilla.suse.com/627030">SUSE bug 627030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1455</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1455" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1455" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1455" ref_url="https://www.suse.com/security/cve/CVE-2010-1455" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1455/">CVE-2010-1455</cve>
	<bugzilla href="https://bugzilla.suse.com/603251">SUSE bug 603251</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1623</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1623" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1623" ref_url="https://www.suse.com/security/cve/CVE-2010-1623" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0859-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00001.html" source="SUSE-SU"/>
    <description>
    Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1623/">CVE-2010-1623</cve>
	<bugzilla href="https://bugzilla.suse.com/650435">SUSE bug 650435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/693778">SUSE bug 693778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725950">SUSE bug 725950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997229">SUSE bug 997229</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147559" comment="libapr-util1-1.5.3-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147560" comment="libapr-util1-dbd-sqlite3-1.5.3-1.46 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140777" comment="libapr-util1-dbd-sqlite3-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140776" comment="libapr-util1-1.5.3-1.77 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144806" comment="libapr-util1-devel-1.5.3-1.77 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513018" comment="libapr-util1-dbd-sqlite3-1.5.3-2.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168393" comment="libapr-util1-dbd-sqlite3-1.5.3-2.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168392" comment="libapr-util1-1.5.3-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009168432" comment="libapr-util1-devel-1.5.3-2.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513017" comment="libapr-util1-1.5.3-2.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514040" comment="libapr-util1-devel-1.5.3-2.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1624</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1624" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1624" ref_url="https://www.suse.com/security/cve/CVE-2010-1624" source="SUSE CVE"/>
    <description>
    The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1624/">CVE-2010-1624</cve>
	<bugzilla href="https://bugzilla.suse.com/604225">SUSE bug 604225</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1633</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1633" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1633" ref_url="https://www.suse.com/security/cve/CVE-2010-1633" source="SUSE CVE"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
    <description>
    RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive information via unspecified vectors. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1633/">CVE-2010-1633</cve>
	<bugzilla href="https://bugzilla.suse.com/610642">SUSE bug 610642</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334861" comment="libopenssl0_9_8 is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334861" comment="libopenssl0_9_8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334860" comment="libopenssl0_9_8-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334861" comment="libopenssl0_9_8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1635</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1635" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1635" ref_url="https://www.suse.com/security/cve/CVE-2010-1635" source="SUSE CVE"/>
    <description>
    The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1635/">CVE-2010-1635</cve>
	<bugzilla href="https://bugzilla.suse.com/605935">SUSE bug 605935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1636</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1636" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1636" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1636" ref_url="https://www.suse.com/security/cve/CVE-2010-1636" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only file descriptor.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1636/">CVE-2010-1636</cve>
	<bugzilla href="https://bugzilla.suse.com/606743">SUSE bug 606743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1641</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1641" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1641" ref_url="https://www.suse.com/security/cve/CVE-2010-1641" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1641/">CVE-2010-1641</cve>
	<bugzilla href="https://bugzilla.suse.com/608576">SUSE bug 608576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1642</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1642" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1642" ref_url="https://www.suse.com/security/cve/CVE-2010-1642" source="SUSE CVE"/>
    <description>
    The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1642/">CVE-2010-1642</cve>
	<bugzilla href="https://bugzilla.suse.com/605935">SUSE bug 605935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1643</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1643" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1643" ref_url="https://www.suse.com/security/cve/CVE-2010-1643" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html" source="SUSE-SU"/>
    <description>
    mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-03-01"/>
	<updated date="2023-03-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1643/">CVE-2010-1643</cve>
	<bugzilla href="https://bugzilla.suse.com/608933">SUSE bug 608933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1646</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1646" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1646" ref_url="https://www.suse.com/security/cve/CVE-2010-1646" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0050-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00022.html" source="SUSE-SU"/>
    <description>
    The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1646/">CVE-2010-1646</cve>
	<bugzilla href="https://bugzilla.suse.com/594738">SUSE bug 594738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141130" comment="sudo-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141810" comment="sudo-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144993" comment="sudo-devel-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145367" comment="sudo-devel-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159307" comment="sudo-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159839" comment="sudo-devel-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512620" comment="sudo-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513418" comment="sudo-1.8.27-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513882" comment="sudo-devel-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514252" comment="sudo-devel-1.8.27-2.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1674</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1674" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1674" ref_url="https://www.suse.com/security/cve/CVE-2010-1674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0274-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0274-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00010.html" source="SUSE-SU"/>
    <description>
    The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1674/">CVE-2010-1674</cve>
	<bugzilla href="https://bugzilla.suse.com/654270">SUSE bug 654270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/685558">SUSE bug 685558</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128392" comment="quagga-0.99.22.1-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128393" comment="quagga-devel-0.99.22.1-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131838" comment="quagga-0.99.22.1-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131839" comment="quagga-devel-0.99.22.1-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143285" comment="quagga-0.99.22.1-3.128 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144987" comment="quagga-devel-0.99.22.1-3.128 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171457" comment="quagga-devel-1.1.1-17.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171450" comment="libospf0-1.1.1-17.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171451" comment="libospfapiclient0-1.1.1-17.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171452" comment="libquagga_pb0-1.1.1-17.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171453" comment="libzebra1-1.1.1-17.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171454" comment="quagga-1.1.1-17.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1675</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1675" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1675" ref_url="https://www.suse.com/security/cve/CVE-2010-1675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0274-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0274-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00010.html" source="SUSE-SU"/>
    <description>
    bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1675/">CVE-2010-1675</cve>
	<bugzilla href="https://bugzilla.suse.com/654270">SUSE bug 654270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/685558">SUSE bug 685558</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128392" comment="quagga-0.99.22.1-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128393" comment="quagga-devel-0.99.22.1-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131838" comment="quagga-0.99.22.1-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131839" comment="quagga-devel-0.99.22.1-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143285" comment="quagga-0.99.22.1-3.128 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144987" comment="quagga-devel-0.99.22.1-3.128 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171457" comment="quagga-devel-1.1.1-17.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171450" comment="libospf0-1.1.1-17.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171451" comment="libospfapiclient0-1.1.1-17.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171452" comment="libquagga_pb0-1.1.1-17.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171453" comment="libzebra1-1.1.1-17.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171454" comment="quagga-1.1.1-17.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1748</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1748" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1748" ref_url="https://www.suse.com/security/cve/CVE-2010-1748" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1018-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00008.html" source="SUSE-SU"/>
    <description>
    The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&amp;URL=% and (2) /admin?URL=/admin/&amp;OP=% URIs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1748/">CVE-2010-1748</cve>
	<bugzilla href="https://bugzilla.suse.com/601352">SUSE bug 601352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/604271">SUSE bug 604271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/644521">SUSE bug 644521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/649256">SUSE bug 649256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/657780">SUSE bug 657780</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144726" comment="cups-devel-1.7.5-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141281" comment="cups-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141282" comment="cups-client-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141283" comment="cups-libs-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141284" comment="cups-libs-32bit-1.7.5-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147501" comment="cups154-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147502" comment="cups154-client-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147503" comment="cups154-filters-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147504" comment="cups154-libs-1.5.4-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513929" comment="cups-ddk-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513930" comment="cups-devel-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1915</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1915" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1915" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1915" ref_url="https://www.suse.com/security/cve/CVE-2010-1915" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose values are not updated in the associated local variables, and access of previously-freed memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1915/">CVE-2010-1915</cve>
	<bugzilla href="https://bugzilla.suse.com/605100">SUSE bug 605100</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1917</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-1917" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1917" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-1917" ref_url="https://www.suse.com/security/cve/CVE-2010-1917" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (PHP crash) via a crafted first argument to the fnmatch function, as demonstrated using a long string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1917/">CVE-2010-1917</cve>
	<bugzilla href="https://bugzilla.suse.com/605097">SUSE bug 605097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/625835">SUSE bug 625835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2063</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2063" ref_url="https://www.suse.com/security/cve/CVE-2010-2063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2063/">CVE-2010-2063</cve>
	<bugzilla href="https://bugzilla.suse.com/611927">SUSE bug 611927</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2065</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2065" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2065" ref_url="https://www.suse.com/security/cve/CVE-2010-2065" source="SUSE CVE"/>
    <description>
    Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2065/">CVE-2010-2065</cve>
	<bugzilla href="https://bugzilla.suse.com/612787">SUSE bug 612787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/612879">SUSE bug 612879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2066</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2066" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2066" ref_url="https://www.suse.com/security/cve/CVE-2010-2066" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2010-2066/">CVE-2010-2066</cve>
	<bugzilla href="https://bugzilla.suse.com/612457">SUSE bug 612457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2067</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2067" ref_url="https://www.suse.com/security/cve/CVE-2010-2067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0387-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0420-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00029.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2067/">CVE-2010-2067</cve>
	<bugzilla href="https://bugzilla.suse.com/612787">SUSE bug 612787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/612879">SUSE bug 612879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2068</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2068" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2068" ref_url="https://www.suse.com/security/cve/CVE-2010-2068" source="SUSE CVE"/>
    <description>
    mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2068/">CVE-2010-2068</cve>
	<bugzilla href="https://bugzilla.suse.com/627030">SUSE bug 627030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/627387">SUSE bug 627387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2074</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2074" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2074" ref_url="https://www.suse.com/security/cve/CVE-2010-2074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-December/002449.html" source="SUSE-SU"/>
		<reference ref_id="TID7002558" ref_url="https://www.suse.com/support/kb/doc?id=7002558" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0393-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00019.html" source="SUSE-SU"/>
    <description>
    istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2074/">CVE-2010-2074</cve>
	<bugzilla href="https://bugzilla.suse.com/609451">SUSE bug 609451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141157" comment="w3m-0.5.3-157.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141825" comment="w3m-0.5.3-153.145 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513442" comment="w3m-0.5.3.git20161120-161.3.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2093</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2093" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2093" ref_url="https://www.suse.com/security/cve/CVE-2010-2093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2093/">CVE-2010-2093</cve>
	<bugzilla href="https://bugzilla.suse.com/609763">SUSE bug 609763</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2094</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2094" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2094" ref_url="https://www.suse.com/security/cve/CVE-2010-2094" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the (1) phar_stream_flush, (2) phar_wrapper_unlink, (3) phar_parse_url, or (4) phar_wrapper_open_url functions in ext/phar/stream.c; and the (5) phar_wrapper_open_dir function in ext/phar/dirstream.c, which triggers errors in the php_stream_wrapper_log_error function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2094/">CVE-2010-2094</cve>
	<bugzilla href="https://bugzilla.suse.com/609766">SUSE bug 609766</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2097</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2097" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2097" ref_url="https://www.suse.com/security/cve/CVE-2010-2097" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2097/">CVE-2010-2097</cve>
	<bugzilla href="https://bugzilla.suse.com/609768">SUSE bug 609768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2100</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2100" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2100" ref_url="https://www.suse.com/security/cve/CVE-2010-2100" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2100/">CVE-2010-2100</cve>
	<bugzilla href="https://bugzilla.suse.com/609769">SUSE bug 609769</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2101</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2101" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2101" ref_url="https://www.suse.com/security/cve/CVE-2010-2101" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2101/">CVE-2010-2101</cve>
	<bugzilla href="https://bugzilla.suse.com/615096">SUSE bug 615096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2156</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2156" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2156" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2156" ref_url="https://www.suse.com/security/cve/CVE-2010-2156" source="SUSE CVE"/>
    <description>
    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2156/">CVE-2010-2156</cve>
	<bugzilla href="https://bugzilla.suse.com/612546">SUSE bug 612546</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2160</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2160" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2160" ref_url="https://www.suse.com/security/cve/CVE-2010-2160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset in an unspecified undocumented opcode in ActionScript Virtual Machine 2, related to getouterscope, a different vulnerability than CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2160/">CVE-2010-2160</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2161</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2161" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2161" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2161" ref_url="https://www.suse.com/security/cve/CVE-2010-2161" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2161/">CVE-2010-2161</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2162</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2162" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2162" ref_url="https://www.suse.com/security/cve/CVE-2010-2162" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors related to improper length calculation and the (1) STSC, (2) STSZ, and (3) STCO atoms.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2162/">CVE-2010-2162</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2163</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2163" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2163" ref_url="https://www.suse.com/security/cve/CVE-2010-2163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2163/">CVE-2010-2163</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2164</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2164" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2164" ref_url="https://www.suse.com/security/cve/CVE-2010-2164" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2164/">CVE-2010-2164</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2165</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2165" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2165" ref_url="https://www.suse.com/security/cve/CVE-2010-2165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2165/">CVE-2010-2165</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2166</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2166" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2166" ref_url="https://www.suse.com/security/cve/CVE-2010-2166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2166/">CVE-2010-2166</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2167</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2167" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2167" ref_url="https://www.suse.com/security/cve/CVE-2010-2167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed (1) GIF or (2) JPEG data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2167/">CVE-2010-2167</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2169</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2169" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2169" ref_url="https://www.suse.com/security/cve/CVE-2010-2169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allow attackers to cause a denial of service (pointer memory corruption) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2169/">CVE-2010-2169</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2170</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2170" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2170" ref_url="https://www.suse.com/security/cve/CVE-2010-2170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2181 and CVE-2010-2183.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2170/">CVE-2010-2170</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2171</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2171" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2171" ref_url="https://www.suse.com/security/cve/CVE-2010-2171" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors related to SWF files, decompression of embedded JPEG image data, and the DefineBits and other unspecified tags, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2171/">CVE-2010-2171</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2172</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2172" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2172" ref_url="https://www.suse.com/security/cve/CVE-2010-2172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player 9 before 9.0.277.0 on unspecified UNIX platforms allows attackers to cause a denial of service via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2172/">CVE-2010-2172</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2173</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2173" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2173" ref_url="https://www.suse.com/security/cve/CVE-2010-2173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newclass (0x58) operator, a different vulnerability than CVE-2010-2174.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2173/">CVE-2010-2173</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2174</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2174" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2174" ref_url="https://www.suse.com/security/cve/CVE-2010-2174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newfunction (0x44) operator, a different vulnerability than CVE-2010-2173.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2174/">CVE-2010-2174</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2175</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2175" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2175" ref_url="https://www.suse.com/security/cve/CVE-2010-2175" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2175/">CVE-2010-2175</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2176</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2176" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2176" ref_url="https://www.suse.com/security/cve/CVE-2010-2176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2176/">CVE-2010-2176</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2177</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2177" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2177" ref_url="https://www.suse.com/security/cve/CVE-2010-2177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2177/">CVE-2010-2177</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2178</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2178" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2178" ref_url="https://www.suse.com/security/cve/CVE-2010-2178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2178/">CVE-2010-2178</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2179</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2179" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2179" ref_url="https://www.suse.com/security/cve/CVE-2010-2179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2179/">CVE-2010-2179</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2180</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2180" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2180" ref_url="https://www.suse.com/security/cve/CVE-2010-2180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2180/">CVE-2010-2180</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2181</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2181" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2181" ref_url="https://www.suse.com/security/cve/CVE-2010-2181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2183.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2181/">CVE-2010-2181</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2182" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2182" ref_url="https://www.suse.com/security/cve/CVE-2010-2182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2182/">CVE-2010-2182</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2183</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2183" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2183" ref_url="https://www.suse.com/security/cve/CVE-2010-2183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2181.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2183/">CVE-2010-2183</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2184</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2184" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2184" ref_url="https://www.suse.com/security/cve/CVE-2010-2184" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2187, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2184/">CVE-2010-2184</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2185</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2185" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2185" ref_url="https://www.suse.com/security/cve/CVE-2010-2185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2185/">CVE-2010-2185</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2186</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2186" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2186" ref_url="https://www.suse.com/security/cve/CVE-2010-2186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2186/">CVE-2010-2186</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2187</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2187" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2187" ref_url="https://www.suse.com/security/cve/CVE-2010-2187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2188.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2187/">CVE-2010-2187</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2188</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2188" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2188" ref_url="https://www.suse.com/security/cve/CVE-2010-2188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0502-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0573-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the ActionScript native object 2200 connect method multiple times with different arguments, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2187.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2188/">CVE-2010-2188</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/630108">SUSE bug 630108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2189</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2189" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2189" ref_url="https://www.suse.com/security/cve/CVE-2010-2189" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:013" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-06/msg00002.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used in conjunction with VMWare Tools on a VMWare platform, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2189/">CVE-2010-2189</cve>
	<bugzilla href="https://bugzilla.suse.com/612063">SUSE bug 612063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2190</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2190" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2190" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2190" ref_url="https://www.suse.com/security/cve/CVE-2010-2190" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2190/">CVE-2010-2190</cve>
	<bugzilla href="https://bugzilla.suse.com/612555">SUSE bug 612555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2191</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2191" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2191" ref_url="https://www.suse.com/security/cve/CVE-2010-2191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) ZEND_ASSIGN_CONCAT opcodes; and the (8) ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler.  NOTE: vectors 2 through 4 are related to the call time pass by reference feature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2191/">CVE-2010-2191</cve>
	<bugzilla href="https://bugzilla.suse.com/612556">SUSE bug 612556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2213</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2213" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2213" ref_url="https://www.suse.com/security/cve/CVE-2010-2213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0502-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0573-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2214, and CVE-2010-2216.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2213/">CVE-2010-2213</cve>
	<bugzilla href="https://bugzilla.suse.com/630108">SUSE bug 630108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2214</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2214" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2214" ref_url="https://www.suse.com/security/cve/CVE-2010-2214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0502-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0573-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2213, and CVE-2010-2216.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2214/">CVE-2010-2214</cve>
	<bugzilla href="https://bugzilla.suse.com/630108">SUSE bug 630108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2216</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2216" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2216" ref_url="https://www.suse.com/security/cve/CVE-2010-2216" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0502-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0573-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00000.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2213, and CVE-2010-2214.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2216/">CVE-2010-2216</cve>
	<bugzilla href="https://bugzilla.suse.com/630108">SUSE bug 630108</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2225</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2225" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2225" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2225" ref_url="https://www.suse.com/security/cve/CVE-2010-2225" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2225/">CVE-2010-2225</cve>
	<bugzilla href="https://bugzilla.suse.com/616232">SUSE bug 616232</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2226</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2226" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2226" ref_url="https://www.suse.com/security/cve/CVE-2010-2226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-20"/>
	<updated date="2023-02-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2226/">CVE-2010-2226</cve>
	<bugzilla href="https://bugzilla.suse.com/615141">SUSE bug 615141</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2233</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2233" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2233" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2233" ref_url="https://www.suse.com/security/cve/CVE-2010-2233" source="SUSE CVE"/>
    <description>
    tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG input."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2233/">CVE-2010-2233</cve>
	<bugzilla href="https://bugzilla.suse.com/612879">SUSE bug 612879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2240</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2240" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2240" ref_url="https://www.suse.com/security/cve/CVE-2010-2240" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000117.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0644-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000121.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0561-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00064.html" source="SUSE-SU"/>
    <description>
    The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2240/">CVE-2010-2240</cve>
	<bugzilla href="https://bugzilla.suse.com/1039348">SUSE bug 1039348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/211997">SUSE bug 211997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/546062">SUSE bug 546062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/59807">SUSE bug 59807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/615929">SUSE bug 615929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/618152">SUSE bug 618152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/632737">SUSE bug 632737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/643986">SUSE bug 643986</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746947">SUSE bug 746947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746949">SUSE bug 746949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145004" comment="xorg-x11-server-sdk-7.6_1.15.2-12.17 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145191" comment="xorg-x11-server-sdk-7.6_1.15.2-36.21 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145374" comment="xorg-x11-server-sdk-7.6_1.18.3-57.34 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157364" comment="xorg-x11-server-sdk-7.6_1.18.3-71.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513890" comment="xorg-x11-server-sdk-1.19.6-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514258" comment="xorg-x11-server-sdk-1.19.6-8.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141173" comment="xorg-x11-server-7.6_1.18.3-57.34 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141174" comment="xorg-x11-server-extra-7.6_1.18.3-57.34 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141837" comment="xorg-x11-server-7.6_1.15.2-12.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141838" comment="xorg-x11-server-extra-7.6_1.15.2-12.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142069" comment="xorg-x11-server-7.6_1.15.2-36.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142070" comment="xorg-x11-server-extra-7.6_1.15.2-36.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157352" comment="xorg-x11-server-7.6_1.18.3-71.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157353" comment="xorg-x11-server-extra-7.6_1.18.3-71.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157352" comment="xorg-x11-server-7.6_1.18.3-71.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157353" comment="xorg-x11-server-extra-7.6_1.18.3-71.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512635" comment="xorg-x11-server-1.19.6-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512636" comment="xorg-x11-server-extra-1.19.6-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512635" comment="xorg-x11-server-1.19.6-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512636" comment="xorg-x11-server-extra-1.19.6-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513452" comment="xorg-x11-server-1.19.6-8.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513453" comment="xorg-x11-server-extra-1.19.6-8.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513452" comment="xorg-x11-server-1.19.6-8.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513453" comment="xorg-x11-server-extra-1.19.6-8.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2242</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2242" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2242" ref_url="https://www.suse.com/security/cve/CVE-2010-2242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0620-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0621-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0625-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00026.html" source="SUSE-SU"/>
    <description>
    Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-18"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-2242/">CVE-2010-2242</cve>
	<bugzilla href="https://bugzilla.suse.com/618155">SUSE bug 618155</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144947" comment="libvirt-devel-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145170" comment="libvirt-devel-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145337" comment="libvirt-devel-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159830" comment="libvirt-devel-3.3.0-4.28 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513838" comment="libvirt-devel-4.0.0-6.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514203" comment="libvirt-devel-5.1.0-11.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143259" comment="libvirt-lock-sanlock-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143366" comment="libvirt-lock-sanlock-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159245" comment="libvirt-lock-sanlock-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159246" comment="libvirt-nss-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513554" comment="libvirt-daemon-hooks-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513555" comment="libvirt-lock-sanlock-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513556" comment="libvirt-nss-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513265" comment="libvirt-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513266" comment="libvirt-admin-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513267" comment="libvirt-client-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513268" comment="libvirt-daemon-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513269" comment="libvirt-daemon-config-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513270" comment="libvirt-daemon-config-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513271" comment="libvirt-daemon-driver-interface-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513272" comment="libvirt-daemon-driver-libxl-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513273" comment="libvirt-daemon-driver-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513274" comment="libvirt-daemon-driver-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513275" comment="libvirt-daemon-driver-nodedev-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513276" comment="libvirt-daemon-driver-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513277" comment="libvirt-daemon-driver-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513278" comment="libvirt-daemon-driver-secret-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513279" comment="libvirt-daemon-driver-storage-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513280" comment="libvirt-daemon-driver-storage-core-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513281" comment="libvirt-daemon-driver-storage-disk-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513282" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513283" comment="libvirt-daemon-driver-storage-logical-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513284" comment="libvirt-daemon-driver-storage-mpath-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513285" comment="libvirt-daemon-driver-storage-rbd-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513286" comment="libvirt-daemon-driver-storage-scsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513287" comment="libvirt-daemon-hooks-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513288" comment="libvirt-daemon-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513289" comment="libvirt-daemon-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513290" comment="libvirt-daemon-xen-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513291" comment="libvirt-doc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513292" comment="libvirt-libs-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513293" comment="libvirt-lock-sanlock-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513294" comment="libvirt-nss-5.1.0-11.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2243</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2243" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2243" ref_url="https://www.suse.com/security/cve/CVE-2010-2243" source="SUSE CVE"/>
    <description>
    A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-2243/">CVE-2010-2243</cve>
	<bugzilla href="https://bugzilla.suse.com/617903">SUSE bug 617903</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2244</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2244" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2244" ref_url="https://www.suse.com/security/cve/CVE-2010-2244" source="SUSE CVE"/>
    <description>
    The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability than CVE-2008-5081.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2244/">CVE-2010-2244</cve>
	<bugzilla href="https://bugzilla.suse.com/603289">SUSE bug 603289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646961">SUSE bug 646961</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140467" comment="avahi-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140468" comment="avahi-lang-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140469" comment="avahi-utils-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140470" comment="libavahi-client3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140471" comment="libavahi-client3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140472" comment="libavahi-common3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140473" comment="libavahi-common3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140474" comment="libavahi-core7-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140475" comment="libdns_sd-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140476" comment="libdns_sd-32bit-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140467" comment="avahi-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140468" comment="avahi-lang-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140469" comment="avahi-utils-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140470" comment="libavahi-client3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140472" comment="libavahi-common3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140474" comment="libavahi-core7-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140475" comment="libdns_sd-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140467" comment="avahi-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140468" comment="avahi-lang-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140470" comment="libavahi-client3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140471" comment="libavahi-client3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140472" comment="libavahi-common3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140473" comment="libavahi-common3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140474" comment="libavahi-core7-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140475" comment="libdns_sd-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140476" comment="libdns_sd-32bit-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141212" comment="avahi-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141213" comment="avahi-lang-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141214" comment="libavahi-client3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141215" comment="libavahi-client3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141216" comment="libavahi-common3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141217" comment="libavahi-common3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141218" comment="libavahi-core7-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141219" comment="libdns_sd-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141220" comment="libdns_sd-32bit-0.6.31-20.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141212" comment="avahi-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141213" comment="avahi-lang-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143136" comment="avahi-utils-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141214" comment="libavahi-client3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141215" comment="libavahi-client3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141216" comment="libavahi-common3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141217" comment="libavahi-common3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141218" comment="libavahi-core7-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141219" comment="libdns_sd-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141220" comment="libdns_sd-32bit-0.6.31-20.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144715" comment="avahi-compat-howl-devel-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144716" comment="avahi-compat-mDNSResponder-devel-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144717" comment="libavahi-devel-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144718" comment="libhowl0-0.6.31-20.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145201" comment="avahi-compat-howl-devel-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145202" comment="avahi-compat-mDNSResponder-devel-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145203" comment="libavahi-devel-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145204" comment="libhowl0-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145205" comment="python-avahi-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512711" comment="avahi-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512712" comment="avahi-lang-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512713" comment="avahi-utils-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512714" comment="libavahi-client3-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512715" comment="libavahi-client3-32bit-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512716" comment="libavahi-common3-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512717" comment="libavahi-common3-32bit-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512718" comment="libavahi-core7-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512719" comment="libdns_sd-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512720" comment="libdns_sd-32bit-0.6.32-32.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513910" comment="avahi-compat-howl-devel-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513911" comment="avahi-compat-mDNSResponder-devel-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513912" comment="libavahi-devel-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513913" comment="libhowl0-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513914" comment="python-avahi-0.6.32-32.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2248</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2248" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2248" ref_url="https://www.suse.com/security/cve/CVE-2010-2248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
    <description>
    fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh value, as demonstrated by a response from an OS/2 server, related to the CIFSSMBWrite and CIFSSMBWrite2 functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2248/">CVE-2010-2248</cve>
	<bugzilla href="https://bugzilla.suse.com/618156">SUSE bug 618156</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2252</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2252" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2252" ref_url="https://www.suse.com/security/cve/CVE-2010-2252" source="SUSE CVE"/>
    <description>
    GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2252/">CVE-2010-2252</cve>
	<bugzilla href="https://bugzilla.suse.com/606317">SUSE bug 606317</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102008" comment="wget-1.14-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131037" comment="wget-1.14-10.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141826" comment="wget-1.14-4.83 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149815" comment="wget-1.14-20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177348" comment="wget-1.14-21.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513443" comment="wget-1.14-21.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2322</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2322" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2322" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2322" ref_url="https://www.suse.com/security/cve/CVE-2010-2322" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2021:2635-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009264.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1107-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AJWN7K3ZWIZYG5QW25KKFIGISFYTG2R3/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:2565-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OHWHBBR2CBRHE7HR6PAPJLGHP3QCHYHS/" source="SUSE-SU"/>
    <description>
    Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2010-2322/">CVE-2010-2322</cve>
	<bugzilla href="https://bugzilla.suse.com/1188517">SUSE bug 1188517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009626538" comment="fastjar-0.98-22.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009626545" comment="fastjar-0.98-22.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694232" comment="fastjar is affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2492</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2492" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2492" ref_url="https://www.suse.com/security/cve/CVE-2010-2492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-2492/">CVE-2010-2492</cve>
	<bugzilla href="https://bugzilla.suse.com/619850">SUSE bug 619850</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2494</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2494" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2494" ref_url="https://www.suse.com/security/cve/CVE-2010-2494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1648-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1650-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0166-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2494/">CVE-2010-2494</cve>
	<bugzilla href="https://bugzilla.suse.com/619847">SUSE bug 619847</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131108" comment="bogofilter-1.2.4-5.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141230" comment="bogofilter-1.2.4-3.56 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2495</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2495" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2495" ref_url="https://www.suse.com/security/cve/CVE-2010-2495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2495/">CVE-2010-2495</cve>
	<bugzilla href="https://bugzilla.suse.com/616612">SUSE bug 616612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2496</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2496" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2496" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2496" ref_url="https://www.suse.com/security/cve/CVE-2010-2496" source="SUSE CVE"/>
    <description>
    stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2010-2496/">CVE-2010-2496</cve>
	<bugzilla href="https://bugzilla.suse.com/620781">SUSE bug 620781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144893" comment="libpacemaker-devel-1.1.12-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144894" comment="pacemaker-cts-1.1.12-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145148" comment="libpacemaker-devel-1.1.13-10.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145149" comment="pacemaker-cts-1.1.13-10.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145309" comment="libpacemaker-devel-1.1.15-19.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145310" comment="pacemaker-cts-1.1.15-19.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159821" comment="libpacemaker-devel-1.1.16-4.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159734" comment="pacemaker-cts-1.1.16-4.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513754" comment="libpacemaker-devel-1.1.19+20180928.0d2680780-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512653" comment="pacemaker-cts-1.1.19+20180928.0d2680780-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514095" comment="libpacemaker-devel-1.1.21+20190809.bf34b44fa-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512665" comment="pacemaker-cts-1.1.21+20190809.bf34b44fa-1.17 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2497</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2497" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2497" ref_url="https://www.suse.com/security/cve/CVE-2010-2497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0549-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00060.html" source="SUSE-SU"/>
    <description>
    Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2497/">CVE-2010-2497</cve>
	<bugzilla href="https://bugzilla.suse.com/619562">SUSE bug 619562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2521</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2521" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2521" ref_url="https://www.suse.com/security/cve/CVE-2010-2521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:036" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the read_buf and nfsd4_decode_compound functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-12"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2521/">CVE-2010-2521</cve>
	<bugzilla href="https://bugzilla.suse.com/620372">SUSE bug 620372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2522</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2522" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2522" ref_url="https://www.suse.com/security/cve/CVE-2010-2522" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0736-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00022.html" source="SUSE-SU"/>
    <description>
    The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-2522/">CVE-2010-2522</cve>
	<bugzilla href="https://bugzilla.suse.com/424311">SUSE bug 424311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141042" comment="mipv6d-2.0.2.umip.0.4-19.77 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147598" comment="mipv6d-2.0.2.umip.0.4-19.63 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2523</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2523" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2523" ref_url="https://www.suse.com/security/cve/CVE-2010-2523" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0736-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00022.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted (1) ND_OPT_PREFIX_INFORMATION or (2) ND_OPT_HOME_AGENT_INFO packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-06"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2523/">CVE-2010-2523</cve>
	<bugzilla href="https://bugzilla.suse.com/424311">SUSE bug 424311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141042" comment="mipv6d-2.0.2.umip.0.4-19.77 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147598" comment="mipv6d-2.0.2.umip.0.4-19.63 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2524</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2524" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2524" ref_url="https://www.suse.com/security/cve/CVE-2010-2524" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:039" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0592-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00009.html" source="SUSE-SU"/>
    <description>
    The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an add_key call, related to a "cache stuffing" issue and MS-DFS referrals.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-2524/">CVE-2010-2524</cve>
	<bugzilla href="https://bugzilla.suse.com/627386">SUSE bug 627386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/627447">SUSE bug 627447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2528</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2528" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2528" ref_url="https://www.suse.com/security/cve/CVE-2010-2528" source="SUSE CVE"/>
    <description>
    The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via an X-Status message that lacks the expected end tag for a (1) desc or (2) title element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2528/">CVE-2010-2528</cve>
	<bugzilla href="https://bugzilla.suse.com/630965">SUSE bug 630965</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2529</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2529" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2529" ref_url="https://www.suse.com/security/cve/CVE-2010-2529" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service (hang) via a crafted echo response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2529/">CVE-2010-2529</cve>
	<bugzilla href="https://bugzilla.suse.com/620837">SUSE bug 620837</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140686" comment="iputils-s20121221-2.19 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147535" comment="iputils-s20121221-2.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2537</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2537" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2537" ref_url="https://www.suse.com/security/cve/CVE-2010-2537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:039" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0592-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00009.html" source="SUSE-SU"/>
    <description>
    The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-2537/">CVE-2010-2537</cve>
	<bugzilla href="https://bugzilla.suse.com/624587">SUSE bug 624587</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2546</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2546" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2546" ref_url="https://www.suse.com/security/cve/CVE-2010-2546" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1471-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-May/004100.html" source="SUSE-SU"/>
    <description>
    Multiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and IT_ProcessEnvelope. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3995.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2546/">CVE-2010-2546</cve>
	<bugzilla href="https://bugzilla.suse.com/625547">SUSE bug 625547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752802">SUSE bug 752802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141563" comment="libmikmod3-32bit-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144883" comment="libmikmod-devel-3.2.0-4.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141562" comment="libmikmod3-3.2.0-4.59 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2547</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2547" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2547" ref_url="https://www.suse.com/security/cve/CVE-2010-2547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0479-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00016.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2547/">CVE-2010-2547</cve>
	<bugzilla href="https://bugzilla.suse.com/625947">SUSE bug 625947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119616" comment="gpg2-2.0.24-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119617" comment="gpg2-lang-2.0.24-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141412" comment="gpg2-2.0.24-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141413" comment="gpg2-lang-2.0.24-1.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159008" comment="gpg2-2.0.24-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159009" comment="gpg2-lang-2.0.24-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512180" comment="gpg2-2.0.24-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512181" comment="gpg2-lang-2.0.24-9.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512899" comment="gpg2-2.0.24-9.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512900" comment="gpg2-lang-2.0.24-9.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2640</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2640" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2640" ref_url="https://www.suse.com/security/cve/CVE-2010-2640" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00019.html" source="SUSE-SU"/>
    <description>
    Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2640/">CVE-2010-2640</cve>
	<bugzilla href="https://bugzilla.suse.com/660555">SUSE bug 660555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140557" comment="evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140558" comment="evince-browser-plugin-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140559" comment="evince-lang-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140560" comment="evince-plugin-djvudocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140561" comment="evince-plugin-dvidocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140562" comment="evince-plugin-pdfdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140563" comment="evince-plugin-psdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140564" comment="evince-plugin-tiffdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140565" comment="evince-plugin-xpsdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140566" comment="libevdocument3-4-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140567" comment="libevview3-3-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140568" comment="nautilus-evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140557" comment="evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140558" comment="evince-browser-plugin-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140559" comment="evince-lang-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140560" comment="evince-plugin-djvudocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140561" comment="evince-plugin-dvidocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140562" comment="evince-plugin-pdfdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140563" comment="evince-plugin-psdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140564" comment="evince-plugin-tiffdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140565" comment="evince-plugin-xpsdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140566" comment="libevdocument3-4-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140567" comment="libevview3-3-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140568" comment="nautilus-evince-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141319" comment="evince-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141320" comment="evince-lang-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141321" comment="libevdocument3-4-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141322" comment="libevview3-3-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141319" comment="evince-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141320" comment="evince-lang-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141321" comment="libevdocument3-4-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141322" comment="libevview3-3-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144733" comment="evince-devel-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145218" comment="evince-devel-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174438" comment="evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174439" comment="evince-browser-plugin-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174440" comment="evince-lang-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174441" comment="evince-plugin-djvudocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174442" comment="evince-plugin-dvidocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174443" comment="evince-plugin-pdfdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174444" comment="evince-plugin-psdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174445" comment="evince-plugin-tiffdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174446" comment="evince-plugin-xpsdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174447" comment="libevdocument3-4-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174448" comment="libevview3-3-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174449" comment="nautilus-evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174438" comment="evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174439" comment="evince-browser-plugin-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174440" comment="evince-lang-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174441" comment="evince-plugin-djvudocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174442" comment="evince-plugin-dvidocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174443" comment="evince-plugin-pdfdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174444" comment="evince-plugin-psdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174445" comment="evince-plugin-tiffdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174446" comment="evince-plugin-xpsdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174447" comment="libevdocument3-4-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174448" comment="libevview3-3-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174449" comment="nautilus-evince-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174458" comment="evince-devel-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512826" comment="evince-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512827" comment="evince-browser-plugin-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512828" comment="evince-lang-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512829" comment="evince-plugin-djvudocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512830" comment="evince-plugin-dvidocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512831" comment="evince-plugin-pdfdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512832" comment="evince-plugin-psdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512833" comment="evince-plugin-tiffdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512834" comment="evince-plugin-xpsdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512835" comment="libevdocument3-4-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512836" comment="libevview3-3-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512837" comment="nautilus-evince-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513941" comment="evince-devel-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513942" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513943" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513942" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513943" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2641</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2641" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2641" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2641" ref_url="https://www.suse.com/security/cve/CVE-2010-2641" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00019.html" source="SUSE-SU"/>
    <description>
    Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2641/">CVE-2010-2641</cve>
	<bugzilla href="https://bugzilla.suse.com/660555">SUSE bug 660555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140557" comment="evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140558" comment="evince-browser-plugin-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140559" comment="evince-lang-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140560" comment="evince-plugin-djvudocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140561" comment="evince-plugin-dvidocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140562" comment="evince-plugin-pdfdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140563" comment="evince-plugin-psdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140564" comment="evince-plugin-tiffdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140565" comment="evince-plugin-xpsdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140566" comment="libevdocument3-4-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140567" comment="libevview3-3-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140568" comment="nautilus-evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140557" comment="evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140558" comment="evince-browser-plugin-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140559" comment="evince-lang-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140560" comment="evince-plugin-djvudocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140561" comment="evince-plugin-dvidocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140562" comment="evince-plugin-pdfdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140563" comment="evince-plugin-psdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140564" comment="evince-plugin-tiffdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140565" comment="evince-plugin-xpsdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140566" comment="libevdocument3-4-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140567" comment="libevview3-3-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140568" comment="nautilus-evince-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141319" comment="evince-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141320" comment="evince-lang-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141321" comment="libevdocument3-4-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141322" comment="libevview3-3-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141319" comment="evince-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141320" comment="evince-lang-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141321" comment="libevdocument3-4-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141322" comment="libevview3-3-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144733" comment="evince-devel-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145218" comment="evince-devel-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174438" comment="evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174439" comment="evince-browser-plugin-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174440" comment="evince-lang-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174441" comment="evince-plugin-djvudocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174442" comment="evince-plugin-dvidocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174443" comment="evince-plugin-pdfdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174444" comment="evince-plugin-psdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174445" comment="evince-plugin-tiffdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174446" comment="evince-plugin-xpsdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174447" comment="libevdocument3-4-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174448" comment="libevview3-3-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174449" comment="nautilus-evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174438" comment="evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174439" comment="evince-browser-plugin-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174440" comment="evince-lang-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174441" comment="evince-plugin-djvudocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174442" comment="evince-plugin-dvidocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174443" comment="evince-plugin-pdfdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174444" comment="evince-plugin-psdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174445" comment="evince-plugin-tiffdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174446" comment="evince-plugin-xpsdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174447" comment="libevdocument3-4-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174448" comment="libevview3-3-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174449" comment="nautilus-evince-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174458" comment="evince-devel-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512826" comment="evince-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512827" comment="evince-browser-plugin-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512828" comment="evince-lang-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512829" comment="evince-plugin-djvudocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512830" comment="evince-plugin-dvidocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512831" comment="evince-plugin-pdfdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512832" comment="evince-plugin-psdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512833" comment="evince-plugin-tiffdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512834" comment="evince-plugin-xpsdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512835" comment="libevdocument3-4-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512836" comment="libevview3-3-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512837" comment="nautilus-evince-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513941" comment="evince-devel-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513942" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513943" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513942" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513943" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2642</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2642" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2642" ref_url="https://www.suse.com/security/cve/CVE-2010-2642" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0140-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2642/">CVE-2010-2642</cve>
	<bugzilla href="https://bugzilla.suse.com/660555">SUSE bug 660555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/661018">SUSE bug 661018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/662411">SUSE bug 662411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/664484">SUSE bug 664484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/790421">SUSE bug 790421</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140557" comment="evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140558" comment="evince-browser-plugin-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140559" comment="evince-lang-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140560" comment="evince-plugin-djvudocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140561" comment="evince-plugin-dvidocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140562" comment="evince-plugin-pdfdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140563" comment="evince-plugin-psdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140564" comment="evince-plugin-tiffdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140565" comment="evince-plugin-xpsdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140566" comment="libevdocument3-4-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140567" comment="libevview3-3-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140568" comment="nautilus-evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140557" comment="evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140558" comment="evince-browser-plugin-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140559" comment="evince-lang-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140560" comment="evince-plugin-djvudocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140561" comment="evince-plugin-dvidocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140562" comment="evince-plugin-pdfdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140563" comment="evince-plugin-psdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140564" comment="evince-plugin-tiffdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140565" comment="evince-plugin-xpsdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140566" comment="libevdocument3-4-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140567" comment="libevview3-3-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140568" comment="nautilus-evince-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141319" comment="evince-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141320" comment="evince-lang-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141321" comment="libevdocument3-4-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141322" comment="libevview3-3-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141319" comment="evince-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141320" comment="evince-lang-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141321" comment="libevdocument3-4-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141322" comment="libevview3-3-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144733" comment="evince-devel-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145218" comment="evince-devel-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174438" comment="evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174439" comment="evince-browser-plugin-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174440" comment="evince-lang-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174441" comment="evince-plugin-djvudocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174442" comment="evince-plugin-dvidocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174443" comment="evince-plugin-pdfdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174444" comment="evince-plugin-psdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174445" comment="evince-plugin-tiffdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174446" comment="evince-plugin-xpsdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174447" comment="libevdocument3-4-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174448" comment="libevview3-3-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174449" comment="nautilus-evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174438" comment="evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174439" comment="evince-browser-plugin-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174440" comment="evince-lang-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174441" comment="evince-plugin-djvudocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174442" comment="evince-plugin-dvidocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174443" comment="evince-plugin-pdfdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174444" comment="evince-plugin-psdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174445" comment="evince-plugin-tiffdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174446" comment="evince-plugin-xpsdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174447" comment="libevdocument3-4-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174448" comment="libevview3-3-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174449" comment="nautilus-evince-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174458" comment="evince-devel-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512826" comment="evince-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512827" comment="evince-browser-plugin-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512828" comment="evince-lang-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512829" comment="evince-plugin-djvudocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512830" comment="evince-plugin-dvidocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512831" comment="evince-plugin-pdfdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512832" comment="evince-plugin-psdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512833" comment="evince-plugin-tiffdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512834" comment="evince-plugin-xpsdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512835" comment="libevdocument3-4-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512836" comment="libevview3-3-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512837" comment="nautilus-evince-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513941" comment="evince-devel-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513942" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513943" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513942" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513943" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2643</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2643" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2643" ref_url="https://www.suse.com/security/cve/CVE-2010-2643" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0045-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00019.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2643/">CVE-2010-2643</cve>
	<bugzilla href="https://bugzilla.suse.com/660555">SUSE bug 660555</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140557" comment="evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140558" comment="evince-browser-plugin-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140559" comment="evince-lang-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140560" comment="evince-plugin-djvudocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140561" comment="evince-plugin-dvidocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140562" comment="evince-plugin-pdfdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140563" comment="evince-plugin-psdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140564" comment="evince-plugin-tiffdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140565" comment="evince-plugin-xpsdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140566" comment="libevdocument3-4-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140567" comment="libevview3-3-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140568" comment="nautilus-evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140557" comment="evince-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140558" comment="evince-browser-plugin-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140559" comment="evince-lang-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140560" comment="evince-plugin-djvudocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140561" comment="evince-plugin-dvidocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140562" comment="evince-plugin-pdfdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140563" comment="evince-plugin-psdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140564" comment="evince-plugin-tiffdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140565" comment="evince-plugin-xpsdocument-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140566" comment="libevdocument3-4-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140567" comment="libevview3-3-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140568" comment="nautilus-evince-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141319" comment="evince-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141320" comment="evince-lang-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141321" comment="libevdocument3-4-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141322" comment="libevview3-3-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141319" comment="evince-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141320" comment="evince-lang-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141321" comment="libevdocument3-4-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141322" comment="libevview3-3-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144733" comment="evince-devel-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141323" comment="typelib-1_0-EvinceDocument-3_0-3.10.3-1.213 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141324" comment="typelib-1_0-EvinceView-3_0-3.10.3-1.213 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145218" comment="evince-devel-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142092" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142093" comment="typelib-1_0-EvinceView-3_0-3.20.1-5.66 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174438" comment="evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174439" comment="evince-browser-plugin-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174440" comment="evince-lang-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174441" comment="evince-plugin-djvudocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174442" comment="evince-plugin-dvidocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174443" comment="evince-plugin-pdfdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174444" comment="evince-plugin-psdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174445" comment="evince-plugin-tiffdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174446" comment="evince-plugin-xpsdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174447" comment="libevdocument3-4-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174448" comment="libevview3-3-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174449" comment="nautilus-evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174438" comment="evince-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174439" comment="evince-browser-plugin-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174440" comment="evince-lang-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174441" comment="evince-plugin-djvudocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174442" comment="evince-plugin-dvidocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174443" comment="evince-plugin-pdfdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174444" comment="evince-plugin-psdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174445" comment="evince-plugin-tiffdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174446" comment="evince-plugin-xpsdocument-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174447" comment="libevdocument3-4-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174448" comment="libevview3-3-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174449" comment="nautilus-evince-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009174458" comment="evince-devel-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174450" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174451" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.22.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512826" comment="evince-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512827" comment="evince-browser-plugin-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512828" comment="evince-lang-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512829" comment="evince-plugin-djvudocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512830" comment="evince-plugin-dvidocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512831" comment="evince-plugin-pdfdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512832" comment="evince-plugin-psdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512833" comment="evince-plugin-tiffdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512834" comment="evince-plugin-xpsdocument-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512835" comment="libevdocument3-4-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512836" comment="libevview3-3-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512837" comment="nautilus-evince-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513941" comment="evince-devel-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513942" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513943" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513942" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-6.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513943" comment="typelib-1_0-EvinceView-3_0-3.20.2-6.27.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2751</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2751" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2751" ref_url="https://www.suse.com/security/cve/CVE-2010-2751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and the history.back and history.forward JavaScript functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-10"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-2751/">CVE-2010-2751</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2752</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2752" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2752" ref_url="https://www.suse.com/security/cve/CVE-2010-2752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2752/">CVE-2010-2752</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2753</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2753" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2753" ref_url="https://www.suse.com/security/cve/CVE-2010-2753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2753/">CVE-2010-2753</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2754</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2754" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2754" ref_url="https://www.suse.com/security/cve/CVE-2010-2754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-4" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2754/">CVE-2010-2754</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2755</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2755" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2755" ref_url="https://www.suse.com/security/cve/CVE-2010-2755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:032" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-07/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0430-3" ref_url="https://lists.opensuse.org/opensuse-updates/2010-07/msg00052.html" source="SUSE-SU"/>
    <description>
    layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2755/">CVE-2010-2755</cve>
	<bugzilla href="https://bugzilla.suse.com/622506">SUSE bug 622506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2760</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2760" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2760" ref_url="https://www.suse.com/security/cve/CVE-2010-2760" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via vectors involving a XUL tree selection, related to a "dangling pointer vulnerability." NOTE: this issue exists because of an incomplete fix for CVE-2010-2753.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2760/">CVE-2010-2760</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2761</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2761" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2761" ref_url="https://www.suse.com/security/cve/CVE-2010-2761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0064-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00027.html" source="SUSE-SU"/>
    <description>
    The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2761/">CVE-2010-2761</cve>
	<bugzilla href="https://bugzilla.suse.com/657343">SUSE bug 657343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/657731">SUSE bug 657731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663396">SUSE bug 663396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/669245">SUSE bug 669245</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/670476">SUSE bug 670476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131038" comment="perl-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131039" comment="perl-32bit-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131040" comment="perl-base-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131041" comment="perl-doc-5.18.2-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131038" comment="perl-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131040" comment="perl-base-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131041" comment="perl-doc-5.18.2-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141769" comment="perl-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141770" comment="perl-32bit-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141771" comment="perl-base-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141772" comment="perl-doc-5.18.2-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512589" comment="perl-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512590" comment="perl-32bit-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512591" comment="perl-base-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512592" comment="perl-doc-5.18.2-12.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513347" comment="perl-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513348" comment="perl-32bit-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513349" comment="perl-base-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513350" comment="perl-doc-5.18.2-12.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2762</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2762" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2762" ref_url="https://www.suse.com/security/cve/CVE-2010-2762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to a chrome privileged object and a chain ending in an outer object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2762/">CVE-2010-2762</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2764</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2764" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2764" ref_url="https://www.suse.com/security/cve/CVE-2010-2764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2764/">CVE-2010-2764</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2765</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2765" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2765" ref_url="https://www.suse.com/security/cve/CVE-2010-2765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a large number of values in the cols (aka columns) attribute, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2765/">CVE-2010-2765</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2766</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2766" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2766" ref_url="https://www.suse.com/security/cve/CVE-2010-2766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2766/">CVE-2010-2766</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2767" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2767" ref_url="https://www.suse.com/security/cve/CVE-2010-2767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle destruction of the DOM plugin array, which might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted access to the navigator object, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2767/">CVE-2010-2767</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2768</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2768" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2768" ref_url="https://www.suse.com/security/cve/CVE-2010-2768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset, which allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms via UTF-7 encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2768/">CVE-2010-2768</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2769</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2769" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2769" ref_url="https://www.suse.com/security/cve/CVE-2010-2769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2769/">CVE-2010-2769</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2798</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2798" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2798" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2798" ref_url="https://www.suse.com/security/cve/CVE-2010-2798" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:039" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0592-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-05"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-2798/">CVE-2010-2798</cve>
	<bugzilla href="https://bugzilla.suse.com/627386">SUSE bug 627386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2800</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2800" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2800" ref_url="https://www.suse.com/security/cve/CVE-2010-2800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000908.html" source="SUSE-SU"/>
    <description>
    The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2800/">CVE-2010-2800</cve>
	<bugzilla href="https://bugzilla.suse.com/627753">SUSE bug 627753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107708" comment="libmspack-devel-0.4-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107709" comment="libmspack0-0.4-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118765" comment="libmspack0-0.4-14.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118766" comment="libmspack-devel-0.4-14.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141564" comment="libmspack0-0.4-3.64 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144886" comment="libmspack-devel-0.4-3.64 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2801</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2801" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2801" ref_url="https://www.suse.com/security/cve/CVE-2010-2801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0886-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000908.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2801/">CVE-2010-2801</cve>
	<bugzilla href="https://bugzilla.suse.com/627753">SUSE bug 627753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107708" comment="libmspack-devel-0.4-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107709" comment="libmspack0-0.4-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118765" comment="libmspack0-0.4-14.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118766" comment="libmspack-devel-0.4-14.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141564" comment="libmspack0-0.4-3.64 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144886" comment="libmspack-devel-0.4-3.64 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2803</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2803" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2803" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2803" ref_url="https://www.suse.com/security/cve/CVE-2010-2803" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2803/">CVE-2010-2803</cve>
	<bugzilla href="https://bugzilla.suse.com/628604">SUSE bug 628604</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2805</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2805" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2805" ref_url="https://www.suse.com/security/cve/CVE-2010-2805" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0549-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-08/msg00060.html" source="SUSE-SU"/>
    <description>
    The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2805/">CVE-2010-2805</cve>
	<bugzilla href="https://bugzilla.suse.com/629447">SUSE bug 629447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2884</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2884" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2884" ref_url="https://www.suse.com/security/cve/CVE-2010-2884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:048" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0706-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00005.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2884/">CVE-2010-2884</cve>
	<bugzilla href="https://bugzilla.suse.com/638466">SUSE bug 638466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/639541">SUSE bug 639541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2891</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2891" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2891" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2891" ref_url="https://www.suse.com/security/cve/CVE-2010-2891" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0011-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2891/">CVE-2010-2891</cve>
	<bugzilla href="https://bugzilla.suse.com/649867">SUSE bug 649867</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144930" comment="libsmi-devel-0.4.8-18.63 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140932" comment="libsmi-0.4.8-18.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140933" comment="libsmi2-0.4.8-18.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147586" comment="libsmi-0.4.8-18.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147587" comment="libsmi2-0.4.8-18.55 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2935</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2935" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2935" ref_url="https://www.suse.com/security/cve/CVE-2010-2935" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0732-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00041.html" source="SUSE-SU"/>
    <description>
    simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an "integer truncation error."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2935/">CVE-2010-2935</cve>
	<bugzilla href="https://bugzilla.suse.com/629085">SUSE bug 629085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130949" comment="libreoffice-sdk-5.1.5.2-29.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159823" comment="libreoffice-sdk-5.2.5.1-42.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513826" comment="libreoffice-sdk-6.0.5.2-43.38.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514180" comment="libreoffice-sdk-6.2.7.1-43.56.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115661" comment="libreoffice-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115662" comment="libreoffice-base-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115663" comment="libreoffice-base-drivers-mysql-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115664" comment="libreoffice-base-drivers-postgresql-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115666" comment="libreoffice-calc-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115667" comment="libreoffice-calc-extensions-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115668" comment="libreoffice-draw-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115669" comment="libreoffice-filters-optional-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115670" comment="libreoffice-gnome-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115677" comment="libreoffice-icon-theme-tango-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115678" comment="libreoffice-impress-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115680" comment="libreoffice-l10n-af-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115681" comment="libreoffice-l10n-ar-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115686" comment="libreoffice-l10n-ca-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115687" comment="libreoffice-l10n-cs-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115689" comment="libreoffice-l10n-da-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115690" comment="libreoffice-l10n-de-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115693" comment="libreoffice-l10n-en-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115694" comment="libreoffice-l10n-es-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115698" comment="libreoffice-l10n-fi-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115699" comment="libreoffice-l10n-fr-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115702" comment="libreoffice-l10n-gu-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115704" comment="libreoffice-l10n-hi-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115706" comment="libreoffice-l10n-hu-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115707" comment="libreoffice-l10n-it-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115708" comment="libreoffice-l10n-ja-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115711" comment="libreoffice-l10n-ko-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115717" comment="libreoffice-l10n-nb-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115718" comment="libreoffice-l10n-nl-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115719" comment="libreoffice-l10n-nn-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115724" comment="libreoffice-l10n-pl-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115725" comment="libreoffice-l10n-pt-BR-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115726" comment="libreoffice-l10n-pt-PT-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115728" comment="libreoffice-l10n-ru-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115730" comment="libreoffice-l10n-sk-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115735" comment="libreoffice-l10n-sv-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115744" comment="libreoffice-l10n-xh-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115745" comment="libreoffice-l10n-zh-Hans-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115746" comment="libreoffice-l10n-zh-Hant-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115747" comment="libreoffice-l10n-zu-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115748" comment="libreoffice-mailmerge-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115749" comment="libreoffice-math-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115750" comment="libreoffice-officebean-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115751" comment="libreoffice-pyuno-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115754" comment="libreoffice-writer-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115755" comment="libreoffice-writer-extensions-5.0.2.2-13.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130948" comment="libreoffice-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131150" comment="libreoffice-base-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131151" comment="libreoffice-base-drivers-mysql-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131152" comment="libreoffice-base-drivers-postgresql-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131153" comment="libreoffice-calc-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131154" comment="libreoffice-calc-extensions-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131155" comment="libreoffice-draw-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131156" comment="libreoffice-filters-optional-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131157" comment="libreoffice-gnome-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131158" comment="libreoffice-icon-theme-galaxy-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131159" comment="libreoffice-icon-theme-tango-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131160" comment="libreoffice-impress-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131161" comment="libreoffice-l10n-af-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131162" comment="libreoffice-l10n-ar-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131163" comment="libreoffice-l10n-ca-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131164" comment="libreoffice-l10n-cs-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131165" comment="libreoffice-l10n-da-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131166" comment="libreoffice-l10n-de-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131167" comment="libreoffice-l10n-en-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131168" comment="libreoffice-l10n-es-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131169" comment="libreoffice-l10n-fi-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131170" comment="libreoffice-l10n-fr-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131171" comment="libreoffice-l10n-gu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131172" comment="libreoffice-l10n-hi-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131173" comment="libreoffice-l10n-hu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131174" comment="libreoffice-l10n-it-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131175" comment="libreoffice-l10n-ja-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131176" comment="libreoffice-l10n-ko-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131177" comment="libreoffice-l10n-nb-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131178" comment="libreoffice-l10n-nl-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131179" comment="libreoffice-l10n-nn-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131180" comment="libreoffice-l10n-pl-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131181" comment="libreoffice-l10n-pt-BR-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131182" comment="libreoffice-l10n-pt-PT-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142143" comment="libreoffice-l10n-ro-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131183" comment="libreoffice-l10n-ru-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131184" comment="libreoffice-l10n-sk-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131185" comment="libreoffice-l10n-sv-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131186" comment="libreoffice-l10n-xh-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131187" comment="libreoffice-l10n-zh-Hans-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131188" comment="libreoffice-l10n-zh-Hant-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131189" comment="libreoffice-l10n-zu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131190" comment="libreoffice-mailmerge-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131191" comment="libreoffice-math-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131192" comment="libreoffice-officebean-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131193" comment="libreoffice-pyuno-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131194" comment="libreoffice-writer-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131195" comment="libreoffice-writer-extensions-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142144" comment="libreofficekit-5.1.5.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130948" comment="libreoffice-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131150" comment="libreoffice-base-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131151" comment="libreoffice-base-drivers-mysql-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131152" comment="libreoffice-base-drivers-postgresql-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131153" comment="libreoffice-calc-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131154" comment="libreoffice-calc-extensions-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131155" comment="libreoffice-draw-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131156" comment="libreoffice-filters-optional-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131157" comment="libreoffice-gnome-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131158" comment="libreoffice-icon-theme-galaxy-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131159" comment="libreoffice-icon-theme-tango-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131160" comment="libreoffice-impress-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131161" comment="libreoffice-l10n-af-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131162" comment="libreoffice-l10n-ar-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144630" comment="libreoffice-l10n-bg-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131163" comment="libreoffice-l10n-ca-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131164" comment="libreoffice-l10n-cs-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131165" comment="libreoffice-l10n-da-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131166" comment="libreoffice-l10n-de-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131167" comment="libreoffice-l10n-en-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131168" comment="libreoffice-l10n-es-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131169" comment="libreoffice-l10n-fi-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131170" comment="libreoffice-l10n-fr-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131171" comment="libreoffice-l10n-gu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131172" comment="libreoffice-l10n-hi-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144631" comment="libreoffice-l10n-hr-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131173" comment="libreoffice-l10n-hu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131174" comment="libreoffice-l10n-it-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131175" comment="libreoffice-l10n-ja-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131176" comment="libreoffice-l10n-ko-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144632" comment="libreoffice-l10n-lt-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131177" comment="libreoffice-l10n-nb-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131178" comment="libreoffice-l10n-nl-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131179" comment="libreoffice-l10n-nn-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131180" comment="libreoffice-l10n-pl-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131181" comment="libreoffice-l10n-pt-BR-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131182" comment="libreoffice-l10n-pt-PT-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142143" comment="libreoffice-l10n-ro-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131183" comment="libreoffice-l10n-ru-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131184" comment="libreoffice-l10n-sk-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131185" comment="libreoffice-l10n-sv-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144633" comment="libreoffice-l10n-uk-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131186" comment="libreoffice-l10n-xh-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131187" comment="libreoffice-l10n-zh-Hans-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131188" comment="libreoffice-l10n-zh-Hant-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131189" comment="libreoffice-l10n-zu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131190" comment="libreoffice-mailmerge-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131191" comment="libreoffice-math-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131192" comment="libreoffice-officebean-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131193" comment="libreoffice-pyuno-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131194" comment="libreoffice-writer-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131195" comment="libreoffice-writer-extensions-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142144" comment="libreofficekit-5.1.5.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141630" comment="libreoffice-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141631" comment="libreoffice-base-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141632" comment="libreoffice-base-drivers-mysql-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141633" comment="libreoffice-base-drivers-postgresql-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141634" comment="libreoffice-calc-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141635" comment="libreoffice-calc-extensions-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141636" comment="libreoffice-draw-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141637" comment="libreoffice-filters-optional-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141638" comment="libreoffice-gnome-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141639" comment="libreoffice-icon-theme-tango-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141640" comment="libreoffice-impress-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141641" comment="libreoffice-l10n-af-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141642" comment="libreoffice-l10n-ar-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141643" comment="libreoffice-l10n-ca-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141644" comment="libreoffice-l10n-cs-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141645" comment="libreoffice-l10n-da-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141646" comment="libreoffice-l10n-de-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141647" comment="libreoffice-l10n-en-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141648" comment="libreoffice-l10n-es-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141649" comment="libreoffice-l10n-fi-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141650" comment="libreoffice-l10n-fr-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141651" comment="libreoffice-l10n-gu-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141652" comment="libreoffice-l10n-hi-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141653" comment="libreoffice-l10n-hu-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141654" comment="libreoffice-l10n-it-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141655" comment="libreoffice-l10n-ja-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141656" comment="libreoffice-l10n-ko-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141657" comment="libreoffice-l10n-nb-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141658" comment="libreoffice-l10n-nl-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141659" comment="libreoffice-l10n-nn-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141660" comment="libreoffice-l10n-pl-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141661" comment="libreoffice-l10n-pt-BR-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141662" comment="libreoffice-l10n-pt-PT-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141663" comment="libreoffice-l10n-ru-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141664" comment="libreoffice-l10n-sk-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141665" comment="libreoffice-l10n-sv-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141666" comment="libreoffice-l10n-xh-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141667" comment="libreoffice-l10n-zh-Hans-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141668" comment="libreoffice-l10n-zh-Hant-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141669" comment="libreoffice-l10n-zu-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141670" comment="libreoffice-mailmerge-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141671" comment="libreoffice-math-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141672" comment="libreoffice-officebean-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141673" comment="libreoffice-pyuno-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141674" comment="libreoffice-writer-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141675" comment="libreoffice-writer-extensions-4.3.1.2-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159657" comment="libreoffice-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159658" comment="libreoffice-base-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159659" comment="libreoffice-base-drivers-mysql-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159660" comment="libreoffice-base-drivers-postgresql-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159661" comment="libreoffice-calc-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159662" comment="libreoffice-calc-extensions-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159663" comment="libreoffice-draw-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159664" comment="libreoffice-filters-optional-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159665" comment="libreoffice-gnome-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159666" comment="libreoffice-icon-theme-galaxy-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159667" comment="libreoffice-icon-theme-tango-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159668" comment="libreoffice-impress-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159669" comment="libreoffice-l10n-af-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159670" comment="libreoffice-l10n-ar-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159671" comment="libreoffice-l10n-ca-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159672" comment="libreoffice-l10n-cs-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159673" comment="libreoffice-l10n-da-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159674" comment="libreoffice-l10n-de-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159675" comment="libreoffice-l10n-en-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159676" comment="libreoffice-l10n-es-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159677" comment="libreoffice-l10n-fi-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159678" comment="libreoffice-l10n-fr-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159679" comment="libreoffice-l10n-gu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159680" comment="libreoffice-l10n-hi-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159681" comment="libreoffice-l10n-hu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159682" comment="libreoffice-l10n-it-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159683" comment="libreoffice-l10n-ja-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159684" comment="libreoffice-l10n-ko-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159685" comment="libreoffice-l10n-nb-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159686" comment="libreoffice-l10n-nl-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159687" comment="libreoffice-l10n-nn-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159688" comment="libreoffice-l10n-pl-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159689" comment="libreoffice-l10n-pt_BR-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159690" comment="libreoffice-l10n-pt_PT-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159691" comment="libreoffice-l10n-ro-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159692" comment="libreoffice-l10n-ru-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159693" comment="libreoffice-l10n-sk-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159694" comment="libreoffice-l10n-sv-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159695" comment="libreoffice-l10n-xh-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159696" comment="libreoffice-l10n-zh_CN-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159697" comment="libreoffice-l10n-zh_TW-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159698" comment="libreoffice-l10n-zu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159699" comment="libreoffice-mailmerge-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159700" comment="libreoffice-math-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159701" comment="libreoffice-officebean-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159702" comment="libreoffice-pyuno-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159703" comment="libreoffice-writer-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159704" comment="libreoffice-writer-extensions-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159705" comment="libreofficekit-5.2.5.1-42.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159657" comment="libreoffice-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159658" comment="libreoffice-base-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159659" comment="libreoffice-base-drivers-mysql-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159660" comment="libreoffice-base-drivers-postgresql-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159661" comment="libreoffice-calc-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159662" comment="libreoffice-calc-extensions-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159663" comment="libreoffice-draw-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159664" comment="libreoffice-filters-optional-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159665" comment="libreoffice-gnome-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159666" comment="libreoffice-icon-theme-galaxy-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159667" comment="libreoffice-icon-theme-tango-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159668" comment="libreoffice-impress-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159669" comment="libreoffice-l10n-af-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159670" comment="libreoffice-l10n-ar-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159845" comment="libreoffice-l10n-bg-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159671" comment="libreoffice-l10n-ca-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159672" comment="libreoffice-l10n-cs-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159673" comment="libreoffice-l10n-da-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159674" comment="libreoffice-l10n-de-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159675" comment="libreoffice-l10n-en-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159676" comment="libreoffice-l10n-es-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159677" comment="libreoffice-l10n-fi-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159678" comment="libreoffice-l10n-fr-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159679" comment="libreoffice-l10n-gu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159680" comment="libreoffice-l10n-hi-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159846" comment="libreoffice-l10n-hr-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159681" comment="libreoffice-l10n-hu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159682" comment="libreoffice-l10n-it-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159683" comment="libreoffice-l10n-ja-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159684" comment="libreoffice-l10n-ko-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159847" comment="libreoffice-l10n-lt-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159685" comment="libreoffice-l10n-nb-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159686" comment="libreoffice-l10n-nl-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159687" comment="libreoffice-l10n-nn-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159688" comment="libreoffice-l10n-pl-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159689" comment="libreoffice-l10n-pt_BR-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159690" comment="libreoffice-l10n-pt_PT-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159691" comment="libreoffice-l10n-ro-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159692" comment="libreoffice-l10n-ru-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159693" comment="libreoffice-l10n-sk-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159694" comment="libreoffice-l10n-sv-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159848" comment="libreoffice-l10n-uk-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159695" comment="libreoffice-l10n-xh-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159696" comment="libreoffice-l10n-zh_CN-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159697" comment="libreoffice-l10n-zh_TW-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159698" comment="libreoffice-l10n-zu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159699" comment="libreoffice-mailmerge-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159700" comment="libreoffice-math-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159701" comment="libreoffice-officebean-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159702" comment="libreoffice-pyuno-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159703" comment="libreoffice-writer-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159704" comment="libreoffice-writer-extensions-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159705" comment="libreofficekit-5.2.5.1-42.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512416" comment="libreoffice-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512417" comment="libreoffice-base-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512418" comment="libreoffice-base-drivers-mysql-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512419" comment="libreoffice-base-drivers-postgresql-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512420" comment="libreoffice-branding-upstream-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512421" comment="libreoffice-calc-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512422" comment="libreoffice-calc-extensions-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512423" comment="libreoffice-draw-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512424" comment="libreoffice-filters-optional-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512425" comment="libreoffice-gnome-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512426" comment="libreoffice-gtk2-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512427" comment="libreoffice-icon-themes-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512428" comment="libreoffice-impress-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512429" comment="libreoffice-l10n-af-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512430" comment="libreoffice-l10n-ar-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512431" comment="libreoffice-l10n-ca-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512432" comment="libreoffice-l10n-cs-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512433" comment="libreoffice-l10n-da-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512434" comment="libreoffice-l10n-de-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512435" comment="libreoffice-l10n-en-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512436" comment="libreoffice-l10n-es-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512437" comment="libreoffice-l10n-fi-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512438" comment="libreoffice-l10n-fr-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512439" comment="libreoffice-l10n-gu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512440" comment="libreoffice-l10n-hi-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512441" comment="libreoffice-l10n-hu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512442" comment="libreoffice-l10n-it-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512443" comment="libreoffice-l10n-ja-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512444" comment="libreoffice-l10n-ko-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512445" comment="libreoffice-l10n-nb-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512446" comment="libreoffice-l10n-nl-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512447" comment="libreoffice-l10n-nn-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512448" comment="libreoffice-l10n-pl-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512449" comment="libreoffice-l10n-pt_BR-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512450" comment="libreoffice-l10n-pt_PT-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512451" comment="libreoffice-l10n-ro-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512452" comment="libreoffice-l10n-ru-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512453" comment="libreoffice-l10n-sk-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512454" comment="libreoffice-l10n-sv-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512455" comment="libreoffice-l10n-xh-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512456" comment="libreoffice-l10n-zh_CN-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512457" comment="libreoffice-l10n-zh_TW-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512458" comment="libreoffice-l10n-zu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512459" comment="libreoffice-mailmerge-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512460" comment="libreoffice-math-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512461" comment="libreoffice-officebean-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512462" comment="libreoffice-pyuno-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512463" comment="libreoffice-writer-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512464" comment="libreoffice-writer-extensions-6.0.5.2-43.38.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512416" comment="libreoffice-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512417" comment="libreoffice-base-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512418" comment="libreoffice-base-drivers-mysql-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512419" comment="libreoffice-base-drivers-postgresql-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512420" comment="libreoffice-branding-upstream-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512421" comment="libreoffice-calc-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512422" comment="libreoffice-calc-extensions-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512423" comment="libreoffice-draw-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512424" comment="libreoffice-filters-optional-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512425" comment="libreoffice-gnome-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512426" comment="libreoffice-gtk2-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512427" comment="libreoffice-icon-themes-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512428" comment="libreoffice-impress-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512429" comment="libreoffice-l10n-af-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512430" comment="libreoffice-l10n-ar-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514261" comment="libreoffice-l10n-bg-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512431" comment="libreoffice-l10n-ca-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512432" comment="libreoffice-l10n-cs-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512433" comment="libreoffice-l10n-da-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512434" comment="libreoffice-l10n-de-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512435" comment="libreoffice-l10n-en-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512436" comment="libreoffice-l10n-es-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512437" comment="libreoffice-l10n-fi-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512438" comment="libreoffice-l10n-fr-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512439" comment="libreoffice-l10n-gu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512440" comment="libreoffice-l10n-hi-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514262" comment="libreoffice-l10n-hr-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512441" comment="libreoffice-l10n-hu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512442" comment="libreoffice-l10n-it-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512443" comment="libreoffice-l10n-ja-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512444" comment="libreoffice-l10n-ko-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514263" comment="libreoffice-l10n-lt-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512445" comment="libreoffice-l10n-nb-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512446" comment="libreoffice-l10n-nl-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512447" comment="libreoffice-l10n-nn-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512448" comment="libreoffice-l10n-pl-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512449" comment="libreoffice-l10n-pt_BR-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512450" comment="libreoffice-l10n-pt_PT-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512451" comment="libreoffice-l10n-ro-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512452" comment="libreoffice-l10n-ru-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512453" comment="libreoffice-l10n-sk-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512454" comment="libreoffice-l10n-sv-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514264" comment="libreoffice-l10n-uk-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512455" comment="libreoffice-l10n-xh-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512456" comment="libreoffice-l10n-zh_CN-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512457" comment="libreoffice-l10n-zh_TW-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512458" comment="libreoffice-l10n-zu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512459" comment="libreoffice-mailmerge-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512460" comment="libreoffice-math-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512461" comment="libreoffice-officebean-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512462" comment="libreoffice-pyuno-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512463" comment="libreoffice-writer-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512464" comment="libreoffice-writer-extensions-6.0.5.2-43.38.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514308" comment="libreoffice-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514309" comment="libreoffice-base-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514310" comment="libreoffice-base-drivers-postgresql-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514311" comment="libreoffice-branding-upstream-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514312" comment="libreoffice-calc-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514313" comment="libreoffice-calc-extensions-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514314" comment="libreoffice-draw-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514315" comment="libreoffice-filters-optional-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514316" comment="libreoffice-gnome-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514317" comment="libreoffice-gtk2-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514318" comment="libreoffice-icon-themes-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514319" comment="libreoffice-impress-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514320" comment="libreoffice-l10n-af-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514321" comment="libreoffice-l10n-ar-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514322" comment="libreoffice-l10n-bg-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514323" comment="libreoffice-l10n-ca-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514324" comment="libreoffice-l10n-cs-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514325" comment="libreoffice-l10n-da-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514326" comment="libreoffice-l10n-de-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514327" comment="libreoffice-l10n-en-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514328" comment="libreoffice-l10n-es-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514329" comment="libreoffice-l10n-fi-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514330" comment="libreoffice-l10n-fr-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514331" comment="libreoffice-l10n-gu-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514332" comment="libreoffice-l10n-hi-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514333" comment="libreoffice-l10n-hr-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514334" comment="libreoffice-l10n-hu-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514335" comment="libreoffice-l10n-it-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514336" comment="libreoffice-l10n-ja-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514337" comment="libreoffice-l10n-ko-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514338" comment="libreoffice-l10n-lt-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514339" comment="libreoffice-l10n-nb-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514340" comment="libreoffice-l10n-nl-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514341" comment="libreoffice-l10n-nn-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514342" comment="libreoffice-l10n-pl-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514343" comment="libreoffice-l10n-pt_BR-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514344" comment="libreoffice-l10n-pt_PT-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514345" comment="libreoffice-l10n-ro-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514346" comment="libreoffice-l10n-ru-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514347" comment="libreoffice-l10n-sk-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514348" comment="libreoffice-l10n-sv-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514349" comment="libreoffice-l10n-uk-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514350" comment="libreoffice-l10n-xh-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514351" comment="libreoffice-l10n-zh_CN-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514352" comment="libreoffice-l10n-zh_TW-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514353" comment="libreoffice-l10n-zu-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514354" comment="libreoffice-mailmerge-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514355" comment="libreoffice-math-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514356" comment="libreoffice-officebean-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514357" comment="libreoffice-pyuno-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514358" comment="libreoffice-writer-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514359" comment="libreoffice-writer-extensions-6.2.7.1-43.56.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2936</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2936" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2936" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2936" ref_url="https://www.suse.com/security/cve/CVE-2010-2936" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0732-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00041.html" source="SUSE-SU"/>
    <description>
    Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted polygons in a PowerPoint document that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2936/">CVE-2010-2936</cve>
	<bugzilla href="https://bugzilla.suse.com/629085">SUSE bug 629085</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130949" comment="libreoffice-sdk-5.1.5.2-29.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159823" comment="libreoffice-sdk-5.2.5.1-42.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513826" comment="libreoffice-sdk-6.0.5.2-43.38.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514180" comment="libreoffice-sdk-6.2.7.1-43.56.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115661" comment="libreoffice-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115662" comment="libreoffice-base-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115663" comment="libreoffice-base-drivers-mysql-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115664" comment="libreoffice-base-drivers-postgresql-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115666" comment="libreoffice-calc-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115667" comment="libreoffice-calc-extensions-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115668" comment="libreoffice-draw-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115669" comment="libreoffice-filters-optional-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115670" comment="libreoffice-gnome-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115677" comment="libreoffice-icon-theme-tango-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115678" comment="libreoffice-impress-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115680" comment="libreoffice-l10n-af-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115681" comment="libreoffice-l10n-ar-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115686" comment="libreoffice-l10n-ca-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115687" comment="libreoffice-l10n-cs-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115689" comment="libreoffice-l10n-da-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115690" comment="libreoffice-l10n-de-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115693" comment="libreoffice-l10n-en-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115694" comment="libreoffice-l10n-es-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115698" comment="libreoffice-l10n-fi-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115699" comment="libreoffice-l10n-fr-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115702" comment="libreoffice-l10n-gu-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115704" comment="libreoffice-l10n-hi-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115706" comment="libreoffice-l10n-hu-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115707" comment="libreoffice-l10n-it-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115708" comment="libreoffice-l10n-ja-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115711" comment="libreoffice-l10n-ko-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115717" comment="libreoffice-l10n-nb-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115718" comment="libreoffice-l10n-nl-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115719" comment="libreoffice-l10n-nn-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115724" comment="libreoffice-l10n-pl-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115725" comment="libreoffice-l10n-pt-BR-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115726" comment="libreoffice-l10n-pt-PT-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115728" comment="libreoffice-l10n-ru-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115730" comment="libreoffice-l10n-sk-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115735" comment="libreoffice-l10n-sv-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115744" comment="libreoffice-l10n-xh-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115745" comment="libreoffice-l10n-zh-Hans-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115746" comment="libreoffice-l10n-zh-Hant-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115747" comment="libreoffice-l10n-zu-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115748" comment="libreoffice-mailmerge-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115749" comment="libreoffice-math-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115750" comment="libreoffice-officebean-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115751" comment="libreoffice-pyuno-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115754" comment="libreoffice-writer-5.0.2.2-13.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115755" comment="libreoffice-writer-extensions-5.0.2.2-13.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130948" comment="libreoffice-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131150" comment="libreoffice-base-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131151" comment="libreoffice-base-drivers-mysql-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131152" comment="libreoffice-base-drivers-postgresql-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131153" comment="libreoffice-calc-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131154" comment="libreoffice-calc-extensions-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131155" comment="libreoffice-draw-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131156" comment="libreoffice-filters-optional-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131157" comment="libreoffice-gnome-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131158" comment="libreoffice-icon-theme-galaxy-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131159" comment="libreoffice-icon-theme-tango-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131160" comment="libreoffice-impress-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131161" comment="libreoffice-l10n-af-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131162" comment="libreoffice-l10n-ar-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131163" comment="libreoffice-l10n-ca-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131164" comment="libreoffice-l10n-cs-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131165" comment="libreoffice-l10n-da-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131166" comment="libreoffice-l10n-de-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131167" comment="libreoffice-l10n-en-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131168" comment="libreoffice-l10n-es-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131169" comment="libreoffice-l10n-fi-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131170" comment="libreoffice-l10n-fr-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131171" comment="libreoffice-l10n-gu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131172" comment="libreoffice-l10n-hi-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131173" comment="libreoffice-l10n-hu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131174" comment="libreoffice-l10n-it-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131175" comment="libreoffice-l10n-ja-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131176" comment="libreoffice-l10n-ko-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131177" comment="libreoffice-l10n-nb-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131178" comment="libreoffice-l10n-nl-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131179" comment="libreoffice-l10n-nn-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131180" comment="libreoffice-l10n-pl-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131181" comment="libreoffice-l10n-pt-BR-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131182" comment="libreoffice-l10n-pt-PT-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142143" comment="libreoffice-l10n-ro-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131183" comment="libreoffice-l10n-ru-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131184" comment="libreoffice-l10n-sk-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131185" comment="libreoffice-l10n-sv-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131186" comment="libreoffice-l10n-xh-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131187" comment="libreoffice-l10n-zh-Hans-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131188" comment="libreoffice-l10n-zh-Hant-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131189" comment="libreoffice-l10n-zu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131190" comment="libreoffice-mailmerge-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131191" comment="libreoffice-math-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131192" comment="libreoffice-officebean-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131193" comment="libreoffice-pyuno-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131194" comment="libreoffice-writer-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131195" comment="libreoffice-writer-extensions-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142144" comment="libreofficekit-5.1.5.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130948" comment="libreoffice-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131150" comment="libreoffice-base-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131151" comment="libreoffice-base-drivers-mysql-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131152" comment="libreoffice-base-drivers-postgresql-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131153" comment="libreoffice-calc-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131154" comment="libreoffice-calc-extensions-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131155" comment="libreoffice-draw-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131156" comment="libreoffice-filters-optional-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131157" comment="libreoffice-gnome-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131158" comment="libreoffice-icon-theme-galaxy-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131159" comment="libreoffice-icon-theme-tango-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131160" comment="libreoffice-impress-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131161" comment="libreoffice-l10n-af-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131162" comment="libreoffice-l10n-ar-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144630" comment="libreoffice-l10n-bg-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131163" comment="libreoffice-l10n-ca-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131164" comment="libreoffice-l10n-cs-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131165" comment="libreoffice-l10n-da-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131166" comment="libreoffice-l10n-de-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131167" comment="libreoffice-l10n-en-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131168" comment="libreoffice-l10n-es-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131169" comment="libreoffice-l10n-fi-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131170" comment="libreoffice-l10n-fr-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131171" comment="libreoffice-l10n-gu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131172" comment="libreoffice-l10n-hi-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144631" comment="libreoffice-l10n-hr-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131173" comment="libreoffice-l10n-hu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131174" comment="libreoffice-l10n-it-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131175" comment="libreoffice-l10n-ja-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131176" comment="libreoffice-l10n-ko-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144632" comment="libreoffice-l10n-lt-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131177" comment="libreoffice-l10n-nb-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131178" comment="libreoffice-l10n-nl-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131179" comment="libreoffice-l10n-nn-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131180" comment="libreoffice-l10n-pl-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131181" comment="libreoffice-l10n-pt-BR-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131182" comment="libreoffice-l10n-pt-PT-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142143" comment="libreoffice-l10n-ro-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131183" comment="libreoffice-l10n-ru-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131184" comment="libreoffice-l10n-sk-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131185" comment="libreoffice-l10n-sv-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144633" comment="libreoffice-l10n-uk-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131186" comment="libreoffice-l10n-xh-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131187" comment="libreoffice-l10n-zh-Hans-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131188" comment="libreoffice-l10n-zh-Hant-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131189" comment="libreoffice-l10n-zu-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131190" comment="libreoffice-mailmerge-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131191" comment="libreoffice-math-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131192" comment="libreoffice-officebean-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131193" comment="libreoffice-pyuno-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131194" comment="libreoffice-writer-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131195" comment="libreoffice-writer-extensions-5.1.5.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142144" comment="libreofficekit-5.1.5.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141630" comment="libreoffice-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141631" comment="libreoffice-base-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141632" comment="libreoffice-base-drivers-mysql-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141633" comment="libreoffice-base-drivers-postgresql-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141634" comment="libreoffice-calc-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141635" comment="libreoffice-calc-extensions-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141636" comment="libreoffice-draw-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141637" comment="libreoffice-filters-optional-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141638" comment="libreoffice-gnome-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141639" comment="libreoffice-icon-theme-tango-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141640" comment="libreoffice-impress-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141641" comment="libreoffice-l10n-af-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141642" comment="libreoffice-l10n-ar-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141643" comment="libreoffice-l10n-ca-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141644" comment="libreoffice-l10n-cs-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141645" comment="libreoffice-l10n-da-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141646" comment="libreoffice-l10n-de-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141647" comment="libreoffice-l10n-en-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141648" comment="libreoffice-l10n-es-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141649" comment="libreoffice-l10n-fi-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141650" comment="libreoffice-l10n-fr-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141651" comment="libreoffice-l10n-gu-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141652" comment="libreoffice-l10n-hi-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141653" comment="libreoffice-l10n-hu-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141654" comment="libreoffice-l10n-it-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141655" comment="libreoffice-l10n-ja-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141656" comment="libreoffice-l10n-ko-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141657" comment="libreoffice-l10n-nb-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141658" comment="libreoffice-l10n-nl-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141659" comment="libreoffice-l10n-nn-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141660" comment="libreoffice-l10n-pl-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141661" comment="libreoffice-l10n-pt-BR-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141662" comment="libreoffice-l10n-pt-PT-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141663" comment="libreoffice-l10n-ru-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141664" comment="libreoffice-l10n-sk-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141665" comment="libreoffice-l10n-sv-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141666" comment="libreoffice-l10n-xh-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141667" comment="libreoffice-l10n-zh-Hans-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141668" comment="libreoffice-l10n-zh-Hant-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141669" comment="libreoffice-l10n-zu-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141670" comment="libreoffice-mailmerge-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141671" comment="libreoffice-math-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141672" comment="libreoffice-officebean-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141673" comment="libreoffice-pyuno-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141674" comment="libreoffice-writer-4.3.1.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141675" comment="libreoffice-writer-extensions-4.3.1.2-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159657" comment="libreoffice-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159658" comment="libreoffice-base-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159659" comment="libreoffice-base-drivers-mysql-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159660" comment="libreoffice-base-drivers-postgresql-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159661" comment="libreoffice-calc-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159662" comment="libreoffice-calc-extensions-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159663" comment="libreoffice-draw-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159664" comment="libreoffice-filters-optional-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159665" comment="libreoffice-gnome-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159666" comment="libreoffice-icon-theme-galaxy-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159667" comment="libreoffice-icon-theme-tango-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159668" comment="libreoffice-impress-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159669" comment="libreoffice-l10n-af-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159670" comment="libreoffice-l10n-ar-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159671" comment="libreoffice-l10n-ca-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159672" comment="libreoffice-l10n-cs-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159673" comment="libreoffice-l10n-da-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159674" comment="libreoffice-l10n-de-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159675" comment="libreoffice-l10n-en-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159676" comment="libreoffice-l10n-es-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159677" comment="libreoffice-l10n-fi-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159678" comment="libreoffice-l10n-fr-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159679" comment="libreoffice-l10n-gu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159680" comment="libreoffice-l10n-hi-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159681" comment="libreoffice-l10n-hu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159682" comment="libreoffice-l10n-it-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159683" comment="libreoffice-l10n-ja-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159684" comment="libreoffice-l10n-ko-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159685" comment="libreoffice-l10n-nb-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159686" comment="libreoffice-l10n-nl-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159687" comment="libreoffice-l10n-nn-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159688" comment="libreoffice-l10n-pl-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159689" comment="libreoffice-l10n-pt_BR-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159690" comment="libreoffice-l10n-pt_PT-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159691" comment="libreoffice-l10n-ro-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159692" comment="libreoffice-l10n-ru-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159693" comment="libreoffice-l10n-sk-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159694" comment="libreoffice-l10n-sv-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159695" comment="libreoffice-l10n-xh-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159696" comment="libreoffice-l10n-zh_CN-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159697" comment="libreoffice-l10n-zh_TW-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159698" comment="libreoffice-l10n-zu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159699" comment="libreoffice-mailmerge-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159700" comment="libreoffice-math-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159701" comment="libreoffice-officebean-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159702" comment="libreoffice-pyuno-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159703" comment="libreoffice-writer-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159704" comment="libreoffice-writer-extensions-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159705" comment="libreofficekit-5.2.5.1-42.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159657" comment="libreoffice-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159658" comment="libreoffice-base-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159659" comment="libreoffice-base-drivers-mysql-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159660" comment="libreoffice-base-drivers-postgresql-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159661" comment="libreoffice-calc-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159662" comment="libreoffice-calc-extensions-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159663" comment="libreoffice-draw-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159664" comment="libreoffice-filters-optional-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159665" comment="libreoffice-gnome-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159666" comment="libreoffice-icon-theme-galaxy-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159667" comment="libreoffice-icon-theme-tango-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159668" comment="libreoffice-impress-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159669" comment="libreoffice-l10n-af-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159670" comment="libreoffice-l10n-ar-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159845" comment="libreoffice-l10n-bg-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159671" comment="libreoffice-l10n-ca-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159672" comment="libreoffice-l10n-cs-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159673" comment="libreoffice-l10n-da-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159674" comment="libreoffice-l10n-de-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159675" comment="libreoffice-l10n-en-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159676" comment="libreoffice-l10n-es-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159677" comment="libreoffice-l10n-fi-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159678" comment="libreoffice-l10n-fr-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159679" comment="libreoffice-l10n-gu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159680" comment="libreoffice-l10n-hi-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159846" comment="libreoffice-l10n-hr-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159681" comment="libreoffice-l10n-hu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159682" comment="libreoffice-l10n-it-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159683" comment="libreoffice-l10n-ja-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159684" comment="libreoffice-l10n-ko-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159847" comment="libreoffice-l10n-lt-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159685" comment="libreoffice-l10n-nb-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159686" comment="libreoffice-l10n-nl-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159687" comment="libreoffice-l10n-nn-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159688" comment="libreoffice-l10n-pl-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159689" comment="libreoffice-l10n-pt_BR-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159690" comment="libreoffice-l10n-pt_PT-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159691" comment="libreoffice-l10n-ro-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159692" comment="libreoffice-l10n-ru-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159693" comment="libreoffice-l10n-sk-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159694" comment="libreoffice-l10n-sv-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159848" comment="libreoffice-l10n-uk-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159695" comment="libreoffice-l10n-xh-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159696" comment="libreoffice-l10n-zh_CN-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159697" comment="libreoffice-l10n-zh_TW-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159698" comment="libreoffice-l10n-zu-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159699" comment="libreoffice-mailmerge-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159700" comment="libreoffice-math-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159701" comment="libreoffice-officebean-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159702" comment="libreoffice-pyuno-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159703" comment="libreoffice-writer-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159704" comment="libreoffice-writer-extensions-5.2.5.1-42.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159705" comment="libreofficekit-5.2.5.1-42.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512416" comment="libreoffice-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512417" comment="libreoffice-base-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512418" comment="libreoffice-base-drivers-mysql-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512419" comment="libreoffice-base-drivers-postgresql-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512420" comment="libreoffice-branding-upstream-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512421" comment="libreoffice-calc-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512422" comment="libreoffice-calc-extensions-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512423" comment="libreoffice-draw-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512424" comment="libreoffice-filters-optional-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512425" comment="libreoffice-gnome-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512426" comment="libreoffice-gtk2-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512427" comment="libreoffice-icon-themes-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512428" comment="libreoffice-impress-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512429" comment="libreoffice-l10n-af-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512430" comment="libreoffice-l10n-ar-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512431" comment="libreoffice-l10n-ca-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512432" comment="libreoffice-l10n-cs-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512433" comment="libreoffice-l10n-da-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512434" comment="libreoffice-l10n-de-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512435" comment="libreoffice-l10n-en-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512436" comment="libreoffice-l10n-es-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512437" comment="libreoffice-l10n-fi-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512438" comment="libreoffice-l10n-fr-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512439" comment="libreoffice-l10n-gu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512440" comment="libreoffice-l10n-hi-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512441" comment="libreoffice-l10n-hu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512442" comment="libreoffice-l10n-it-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512443" comment="libreoffice-l10n-ja-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512444" comment="libreoffice-l10n-ko-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512445" comment="libreoffice-l10n-nb-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512446" comment="libreoffice-l10n-nl-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512447" comment="libreoffice-l10n-nn-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512448" comment="libreoffice-l10n-pl-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512449" comment="libreoffice-l10n-pt_BR-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512450" comment="libreoffice-l10n-pt_PT-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512451" comment="libreoffice-l10n-ro-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512452" comment="libreoffice-l10n-ru-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512453" comment="libreoffice-l10n-sk-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512454" comment="libreoffice-l10n-sv-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512455" comment="libreoffice-l10n-xh-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512456" comment="libreoffice-l10n-zh_CN-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512457" comment="libreoffice-l10n-zh_TW-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512458" comment="libreoffice-l10n-zu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512459" comment="libreoffice-mailmerge-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512460" comment="libreoffice-math-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512461" comment="libreoffice-officebean-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512462" comment="libreoffice-pyuno-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512463" comment="libreoffice-writer-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512464" comment="libreoffice-writer-extensions-6.0.5.2-43.38.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512416" comment="libreoffice-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512417" comment="libreoffice-base-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512418" comment="libreoffice-base-drivers-mysql-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512419" comment="libreoffice-base-drivers-postgresql-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512420" comment="libreoffice-branding-upstream-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512421" comment="libreoffice-calc-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512422" comment="libreoffice-calc-extensions-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512423" comment="libreoffice-draw-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512424" comment="libreoffice-filters-optional-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512425" comment="libreoffice-gnome-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512426" comment="libreoffice-gtk2-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512427" comment="libreoffice-icon-themes-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512428" comment="libreoffice-impress-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512429" comment="libreoffice-l10n-af-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512430" comment="libreoffice-l10n-ar-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514261" comment="libreoffice-l10n-bg-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512431" comment="libreoffice-l10n-ca-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512432" comment="libreoffice-l10n-cs-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512433" comment="libreoffice-l10n-da-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512434" comment="libreoffice-l10n-de-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512435" comment="libreoffice-l10n-en-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512436" comment="libreoffice-l10n-es-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512437" comment="libreoffice-l10n-fi-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512438" comment="libreoffice-l10n-fr-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512439" comment="libreoffice-l10n-gu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512440" comment="libreoffice-l10n-hi-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514262" comment="libreoffice-l10n-hr-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512441" comment="libreoffice-l10n-hu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512442" comment="libreoffice-l10n-it-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512443" comment="libreoffice-l10n-ja-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512444" comment="libreoffice-l10n-ko-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514263" comment="libreoffice-l10n-lt-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512445" comment="libreoffice-l10n-nb-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512446" comment="libreoffice-l10n-nl-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512447" comment="libreoffice-l10n-nn-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512448" comment="libreoffice-l10n-pl-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512449" comment="libreoffice-l10n-pt_BR-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512450" comment="libreoffice-l10n-pt_PT-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512451" comment="libreoffice-l10n-ro-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512452" comment="libreoffice-l10n-ru-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512453" comment="libreoffice-l10n-sk-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512454" comment="libreoffice-l10n-sv-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514264" comment="libreoffice-l10n-uk-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512455" comment="libreoffice-l10n-xh-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512456" comment="libreoffice-l10n-zh_CN-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512457" comment="libreoffice-l10n-zh_TW-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512458" comment="libreoffice-l10n-zu-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512459" comment="libreoffice-mailmerge-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512460" comment="libreoffice-math-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512461" comment="libreoffice-officebean-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512462" comment="libreoffice-pyuno-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512463" comment="libreoffice-writer-6.0.5.2-43.38.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512464" comment="libreoffice-writer-extensions-6.0.5.2-43.38.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514308" comment="libreoffice-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514309" comment="libreoffice-base-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514310" comment="libreoffice-base-drivers-postgresql-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514311" comment="libreoffice-branding-upstream-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514312" comment="libreoffice-calc-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514313" comment="libreoffice-calc-extensions-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514314" comment="libreoffice-draw-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514315" comment="libreoffice-filters-optional-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514316" comment="libreoffice-gnome-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514317" comment="libreoffice-gtk2-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514318" comment="libreoffice-icon-themes-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514319" comment="libreoffice-impress-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514320" comment="libreoffice-l10n-af-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514321" comment="libreoffice-l10n-ar-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514322" comment="libreoffice-l10n-bg-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514323" comment="libreoffice-l10n-ca-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514324" comment="libreoffice-l10n-cs-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514325" comment="libreoffice-l10n-da-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514326" comment="libreoffice-l10n-de-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514327" comment="libreoffice-l10n-en-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514328" comment="libreoffice-l10n-es-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514329" comment="libreoffice-l10n-fi-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514330" comment="libreoffice-l10n-fr-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514331" comment="libreoffice-l10n-gu-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514332" comment="libreoffice-l10n-hi-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514333" comment="libreoffice-l10n-hr-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514334" comment="libreoffice-l10n-hu-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514335" comment="libreoffice-l10n-it-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514336" comment="libreoffice-l10n-ja-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514337" comment="libreoffice-l10n-ko-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514338" comment="libreoffice-l10n-lt-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514339" comment="libreoffice-l10n-nb-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514340" comment="libreoffice-l10n-nl-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514341" comment="libreoffice-l10n-nn-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514342" comment="libreoffice-l10n-pl-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514343" comment="libreoffice-l10n-pt_BR-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514344" comment="libreoffice-l10n-pt_PT-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514345" comment="libreoffice-l10n-ro-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514346" comment="libreoffice-l10n-ru-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514347" comment="libreoffice-l10n-sk-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514348" comment="libreoffice-l10n-sv-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514349" comment="libreoffice-l10n-uk-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514350" comment="libreoffice-l10n-xh-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514351" comment="libreoffice-l10n-zh_CN-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514352" comment="libreoffice-l10n-zh_TW-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514353" comment="libreoffice-l10n-zu-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514354" comment="libreoffice-mailmerge-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514355" comment="libreoffice-math-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514356" comment="libreoffice-officebean-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514357" comment="libreoffice-pyuno-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514358" comment="libreoffice-writer-6.2.7.1-43.56.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514359" comment="libreoffice-writer-extensions-6.2.7.1-43.56.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2939</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2939" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2939" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2939" ref_url="https://www.suse.com/security/cve/CVE-2010-2939" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0952-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00023.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2939/">CVE-2010-2939</cve>
	<bugzilla href="https://bugzilla.suse.com/489641">SUSE bug 489641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2941</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2941" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2941" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2941" ref_url="https://www.suse.com/security/cve/CVE-2010-2941" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1018-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00008.html" source="SUSE-SU"/>
    <description>
    ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2941/">CVE-2010-2941</cve>
	<bugzilla href="https://bugzilla.suse.com/649256">SUSE bug 649256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/654627">SUSE bug 654627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144726" comment="cups-devel-1.7.5-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141281" comment="cups-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141282" comment="cups-client-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141283" comment="cups-libs-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141284" comment="cups-libs-32bit-1.7.5-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147501" comment="cups154-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147502" comment="cups154-client-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147503" comment="cups154-filters-1.5.4-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147504" comment="cups154-libs-1.5.4-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513929" comment="cups-ddk-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513930" comment="cups-devel-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2942</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2942" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2942" ref_url="https://www.suse.com/security/cve/CVE-2010-2942" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2010-2942/">CVE-2010-2942</cve>
	<bugzilla href="https://bugzilla.suse.com/632309">SUSE bug 632309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/642324">SUSE bug 642324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2943</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2943" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2943" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2943" ref_url="https://www.suse.com/security/cve/CVE-2010-2943" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2010-2943/">CVE-2010-2943</cve>
	<bugzilla href="https://bugzilla.suse.com/632317">SUSE bug 632317</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2946</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2946" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2946" ref_url="https://www.suse.com/security/cve/CVE-2010-2946" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    fs/jfs/xattr.c in the Linux kernel before 2.6.35.2 does not properly handle a certain legacy format for storage of extended attributes, which might allow local users by bypass intended xattr namespace restrictions via an "os2." substring at the beginning of a name.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2946/">CVE-2010-2946</cve>
	<bugzilla href="https://bugzilla.suse.com/633585">SUSE bug 633585</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2947</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2947" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2947" ref_url="https://www.suse.com/security/cve/CVE-2010-2947" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0723-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00014.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2947/">CVE-2010-2947</cve>
	<bugzilla href="https://bugzilla.suse.com/631582">SUSE bug 631582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144788" comment="libHX-devel-3.18-1.19 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147540" comment="libHX28-3.18-1.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140717" comment="libHX28-3.18-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140718" comment="libHX28-32bit-3.18-1.19 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2950</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2950" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2950" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2950" ref_url="https://www.suse.com/security/cve/CVE-2010-2950" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
    <description>
    Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2950/">CVE-2010-2950</cve>
	<bugzilla href="https://bugzilla.suse.com/633934">SUSE bug 633934</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2954</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2954" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2954" ref_url="https://www.suse.com/security/cve/CVE-2010-2954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2954/">CVE-2010-2954</cve>
	<bugzilla href="https://bugzilla.suse.com/636112">SUSE bug 636112</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2955</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2955" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2955" ref_url="https://www.suse.com/security/cve/CVE-2010-2955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2955/">CVE-2010-2955</cve>
	<bugzilla href="https://bugzilla.suse.com/635413">SUSE bug 635413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2992</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2992" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2992" ref_url="https://www.suse.com/security/cve/CVE-2010-2992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00012.html" source="SUSE-SU"/>
    <description>
    packet-gsm_a_rr.c in the GSM A RR dissector in Wireshark 1.2.2 through 1.2.9 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2992/">CVE-2010-2992</cve>
	<bugzilla href="https://bugzilla.suse.com/630599">SUSE bug 630599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334012" comment="wireshark is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336229" comment="libwireshark9 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336230" comment="libwiretap7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335377" comment="libwscodecs1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336231" comment="libwsutil8 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334012" comment="wireshark is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335379" comment="wireshark-gtk is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2993</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2993" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2993" ref_url="https://www.suse.com/security/cve/CVE-2010-2993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The IPMI dissector in Wireshark 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2993/">CVE-2010-2993</cve>
	<bugzilla href="https://bugzilla.suse.com/630599">SUSE bug 630599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334012" comment="wireshark is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336229" comment="libwireshark9 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336230" comment="libwiretap7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335377" comment="libwscodecs1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336231" comment="libwsutil8 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334012" comment="wireshark is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335379" comment="wireshark-gtk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2994</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2994" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2994" ref_url="https://www.suse.com/security/cve/CVE-2010-2994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.14 and 1.2.0 through 1.2.9 has unknown impact and remote attack vectors.  NOTE: this issue exists because of a CVE-2010-2284 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2994/">CVE-2010-2994</cve>
	<bugzilla href="https://bugzilla.suse.com/630599">SUSE bug 630599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334012" comment="wireshark is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336229" comment="libwireshark9 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336230" comment="libwiretap7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335377" comment="libwscodecs1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336231" comment="libwsutil8 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334012" comment="wireshark is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335379" comment="wireshark-gtk is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2995</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-2995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2995" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-2995" ref_url="https://www.suse.com/security/cve/CVE-2010-2995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00012.html" source="SUSE-SU"/>
    <description>
    The SigComp Universal Decompressor Virtual Machine (UDVM) in Wireshark 0.10.8 through 1.0.14 and 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to sigcomp-udvm.c and an off-by-one error, which triggers a buffer overflow, different vulnerabilities than CVE-2010-2287.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2995/">CVE-2010-2995</cve>
	<bugzilla href="https://bugzilla.suse.com/630599">SUSE bug 630599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334012" comment="wireshark is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336229" comment="libwireshark9 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336230" comment="libwiretap7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335377" comment="libwscodecs1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336231" comment="libwsutil8 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334012" comment="wireshark is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335379" comment="wireshark-gtk is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3053</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3053" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3053" ref_url="https://www.suse.com/security/cve/CVE-2010-3053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00015.html" source="SUSE-SU"/>
    <description>
    bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3053/">CVE-2010-3053</cve>
	<bugzilla href="https://bugzilla.suse.com/633938">SUSE bug 633938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645982">SUSE bug 645982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3054</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3054" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3054" ref_url="https://www.suse.com/security/cve/CVE-2010-3054" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00015.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3054/">CVE-2010-3054</cve>
	<bugzilla href="https://bugzilla.suse.com/633943">SUSE bug 633943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645982">SUSE bug 645982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3063</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3063" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3063" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3063" ref_url="https://www.suse.com/security/cve/CVE-2010-3063" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    The php_mysqlnd_read_error_from_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length, which allows context-dependent attackers to trigger a heap-based buffer overflow via crafted inputs that cause a negative length value to be used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3063/">CVE-2010-3063</cve>
	<bugzilla href="https://bugzilla.suse.com/619486">SUSE bug 619486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633932">SUSE bug 633932</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3065</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3065" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3065" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3065" ref_url="https://www.suse.com/security/cve/CVE-2010-3065" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0678-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00053.html" source="SUSE-SU"/>
    <description>
    The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which allows context-dependent attackers to modify arbitrary session variables via a crafted session variable name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3065/">CVE-2010-3065</cve>
	<bugzilla href="https://bugzilla.suse.com/619483">SUSE bug 619483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/633932">SUSE bug 633932</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3066</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3066" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3066" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3066" ref_url="https://www.suse.com/security/cve/CVE-2010-3066" source="SUSE CVE"/>
    <description>
    The io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of service (NULL pointer dereference) via a crafted io_submit system call with an IOCB_FLAG_RESFD flag.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3066/">CVE-2010-3066</cve>
	<bugzilla href="https://bugzilla.suse.com/657944">SUSE bug 657944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3067</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3067" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3067" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3067" ref_url="https://www.suse.com/security/cve/CVE-2010-3067" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service or possibly have unspecified other impact via crafted use of the io_submit system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3067/">CVE-2010-3067</cve>
	<bugzilla href="https://bugzilla.suse.com/642302">SUSE bug 642302</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3069</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3069" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3069" ref_url="https://www.suse.com/security/cve/CVE-2010-3069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0653-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0658-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0659-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-09/msg00044.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Windows Security ID (SID) on a file share.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3069/">CVE-2010-3069</cve>
	<bugzilla href="https://bugzilla.suse.com/637218">SUSE bug 637218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3078</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3078" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3078" ref_url="https://www.suse.com/security/cve/CVE-2010-3078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2010-3078/">CVE-2010-3078</cve>
	<bugzilla href="https://bugzilla.suse.com/637436">SUSE bug 637436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3079</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3079" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3079" ref_url="https://www.suse.com/security/cve/CVE-2010-3079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service (NULL pointer dereference and outage of all function tracing files) via an lseek call on a file descriptor associated with the set_ftrace_filter file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-3079/">CVE-2010-3079</cve>
	<bugzilla href="https://bugzilla.suse.com/637502">SUSE bug 637502</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3080</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3080" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3080" ref_url="https://www.suse.com/security/cve/CVE-2010-3080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of service or possibly have unspecified other impact via an unsuccessful attempt to open the /dev/sequencer device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3080/">CVE-2010-3080</cve>
	<bugzilla href="https://bugzilla.suse.com/638277">SUSE bug 638277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3081</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3081" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3081" ref_url="https://www.suse.com/security/cve/CVE-2010-3081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-3081/">CVE-2010-3081</cve>
	<bugzilla href="https://bugzilla.suse.com/639709">SUSE bug 639709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/641575">SUSE bug 641575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3084</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3084" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3084" ref_url="https://www.suse.com/security/cve/CVE-2010-3084" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the niu_get_ethtool_tcam_all function in drivers/net/niu.c in the Linux kernel before 2.6.36-rc4 allows local users to cause a denial of service or possibly have unspecified other impact via the ETHTOOL_GRXCLSRLALL ethtool command.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3084/">CVE-2010-3084</cve>
	<bugzilla href="https://bugzilla.suse.com/638274">SUSE bug 638274</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3086</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3086" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3086" ref_url="https://www.suse.com/security/cve/CVE-2010-3086" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
    <description>
    include/asm-x86/futex.h in the Linux kernel before 2.6.25 does not properly implement exception fixup, which allows local users to cause a denial of service (panic) via an invalid application that triggers a page fault.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3086/">CVE-2010-3086</cve>
	<bugzilla href="https://bugzilla.suse.com/652595">SUSE bug 652595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3166</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3166" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3166" ref_url="https://www.suse.com/security/cve/CVE-2010-3166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3166/">CVE-2010-3166</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3167</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3167" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3167" ref_url="https://www.suse.com/security/cve/CVE-2010-3167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3167/">CVE-2010-3167</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3168</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3168" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3168" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3168" ref_url="https://www.suse.com/security/cve/CVE-2010-3168" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to cause a denial of service (deleted memory access and application crash) or possibly execute arbitrary code by setting unspecified properties.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-19"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3168/">CVE-2010-3168</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3169</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3169" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3169" ref_url="https://www.suse.com/security/cve/CVE-2010-3169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:049" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3169/">CVE-2010-3169</cve>
	<bugzilla href="https://bugzilla.suse.com/637303">SUSE bug 637303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638109">SUSE bug 638109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3170</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3170" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3170" ref_url="https://www.suse.com/security/cve/CVE-2010-3170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0904-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3170/">CVE-2010-3170</cve>
	<bugzilla href="https://bugzilla.suse.com/637290">SUSE bug 637290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/868629">SUSE bug 868629</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116020" comment="libfreebl3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116021" comment="libfreebl3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116024" comment="libsoftokn3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116025" comment="libsoftokn3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116031" comment="mozilla-nss-devel-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129313" comment="libfreebl3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129315" comment="libsoftokn3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129306" comment="mozilla-nss-devel-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143227" comment="libfreebl3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143228" comment="libfreebl3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143229" comment="libsoftokn3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143230" comment="libsoftokn3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144970" comment="mozilla-nss-devel-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155339" comment="libfreebl3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155342" comment="libfreebl3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155340" comment="libsoftokn3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155343" comment="libsoftokn3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155345" comment="mozilla-nss-devel-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513535" comment="libfreebl3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513536" comment="libfreebl3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513537" comment="libsoftokn3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513538" comment="libsoftokn3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513097" comment="libfreebl3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513098" comment="libfreebl3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513099" comment="libfreebl3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513100" comment="libfreebl3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513101" comment="libsoftokn3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513102" comment="libsoftokn3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513103" comment="libsoftokn3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513104" comment="libsoftokn3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513105" comment="mozilla-nss-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513106" comment="mozilla-nss-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513107" comment="mozilla-nss-certs-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513108" comment="mozilla-nss-certs-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513109" comment="mozilla-nss-sysinit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513110" comment="mozilla-nss-sysinit-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513111" comment="mozilla-nss-tools-3.45-58.31.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513857" comment="mozilla-nss-devel-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514218" comment="mozilla-nss-devel-3.45-58.31.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3173</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3173" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3173" ref_url="https://www.suse.com/security/cve/CVE-2010-3173" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3173/">CVE-2010-3173</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3174</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3174" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3174" ref_url="https://www.suse.com/security/cve/CVE-2010-3174" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3174/">CVE-2010-3174</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3175</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3175" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3175" ref_url="https://www.suse.com/security/cve/CVE-2010-3175" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3175/">CVE-2010-3175</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3176</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3176" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3176" ref_url="https://www.suse.com/security/cve/CVE-2010-3176" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3176/">CVE-2010-3176</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3177</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3177" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3177" ref_url="https://www.suse.com/security/cve/CVE-2010-3177" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a (1) file or (2) directory on a Gopher server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3177/">CVE-2010-3177</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3178</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3178" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3178" ref_url="https://www.suse.com/security/cve/CVE-2010-3178" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3178/">CVE-2010-3178</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3179</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3179" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3179" ref_url="https://www.suse.com/security/cve/CVE-2010-3179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3179/">CVE-2010-3179</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3180</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3180" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3180" ref_url="https://www.suse.com/security/cve/CVE-2010-3180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3180/">CVE-2010-3180</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3182" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3182" ref_url="https://www.suse.com/security/cve/CVE-2010-3182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3182/">CVE-2010-3182</cve>
	<bugzilla href="https://bugzilla.suse.com/642502">SUSE bug 642502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3183</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3183" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3183" ref_url="https://www.suse.com/security/cve/CVE-2010-3183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0906-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via vectors involving a "dangling pointer" and the JS_ValueToId function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3183/">CVE-2010-3183</cve>
	<bugzilla href="https://bugzilla.suse.com/645315">SUSE bug 645315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3296</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3296" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3296" ref_url="https://www.suse.com/security/cve/CVE-2010-3296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3296/">CVE-2010-3296</cve>
	<bugzilla href="https://bugzilla.suse.com/639481">SUSE bug 639481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/649187">SUSE bug 649187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3297</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3297" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3297" ref_url="https://www.suse.com/security/cve/CVE-2010-3297" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:044" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQL_GETMASTRCFG ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3297/">CVE-2010-3297</cve>
	<bugzilla href="https://bugzilla.suse.com/639482">SUSE bug 639482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/649187">SUSE bug 649187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3298</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3298" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3298" ref_url="https://www.suse.com/security/cve/CVE-2010-3298" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
    <description>
    The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3298/">CVE-2010-3298</cve>
	<bugzilla href="https://bugzilla.suse.com/639483">SUSE bug 639483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/649187">SUSE bug 649187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3301</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3301" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3301" ref_url="https://www.suse.com/security/cve/CVE-2010-3301" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:045" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:047" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html" source="SUSE-SU"/>
    <description>
    The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3301/">CVE-2010-3301</cve>
	<bugzilla href="https://bugzilla.suse.com/639708">SUSE bug 639708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3310</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3310" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3310" ref_url="https://www.suse.com/security/cve/CVE-2010-3310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:050" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:051" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:052" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0720-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0734-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0738-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00023.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a rose_getname function call, related to the rose_bind and rose_connect functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3310/">CVE-2010-3310</cve>
	<bugzilla href="https://bugzilla.suse.com/640721">SUSE bug 640721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3311</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3311" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3311" ref_url="https://www.suse.com/security/cve/CVE-2010-3311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0726-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00015.html" source="SUSE-SU"/>
    <description>
    Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3311/">CVE-2010-3311</cve>
	<bugzilla href="https://bugzilla.suse.com/635692">SUSE bug 635692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/641580">SUSE bug 641580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/645982">SUSE bug 645982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3315</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3315" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3315" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3315" ref_url="https://www.suse.com/security/cve/CVE-2010-3315" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1042-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3315/">CVE-2010-3315</cve>
	<bugzilla href="https://bugzilla.suse.com/649861">SUSE bug 649861</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3430</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3430" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3430" ref_url="https://www.suse.com/security/cve/CVE-2010-3430" source="SUSE CVE"/>
    <description>
    The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not perform the required setfsgid and setgroups system calls, which might allow local users to obtain sensitive information by leveraging unintended group permissions, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3430/">CVE-2010-3430</cve>
	<bugzilla href="https://bugzilla.suse.com/623457">SUSE bug 623457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/631802">SUSE bug 631802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144979" comment="pam-devel-1.1.8-11.57 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145178" comment="pam-devel-1.1.8-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155981" comment="pam-devel-1.1.8-23.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513868" comment="pam-devel-1.1.8-24.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514236" comment="pam-devel-1.1.8-24.27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141057" comment="pam-32bit-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141764" comment="pam-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141765" comment="pam-32bit-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141766" comment="pam-doc-1.1.8-11.57 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155972" comment="pam-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155973" comment="pam-32bit-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155974" comment="pam-doc-1.1.8-23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512585" comment="pam-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512586" comment="pam-32bit-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512587" comment="pam-doc-1.1.8-24.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513344" comment="pam-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513345" comment="pam-32bit-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513346" comment="pam-doc-1.1.8-24.27.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3431</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3431" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3431" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3431" ref_url="https://www.suse.com/security/cve/CVE-2010-3431" source="SUSE CVE"/>
    <description>
    The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not check the return value of the setfsuid system call, which might allow local users to obtain sensitive information by leveraging an unintended uid, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3431/">CVE-2010-3431</cve>
	<bugzilla href="https://bugzilla.suse.com/623457">SUSE bug 623457</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144979" comment="pam-devel-1.1.8-11.57 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145178" comment="pam-devel-1.1.8-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155981" comment="pam-devel-1.1.8-23.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513868" comment="pam-devel-1.1.8-24.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514236" comment="pam-devel-1.1.8-24.27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141057" comment="pam-32bit-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141764" comment="pam-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141765" comment="pam-32bit-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141766" comment="pam-doc-1.1.8-11.57 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155972" comment="pam-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155973" comment="pam-32bit-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155974" comment="pam-doc-1.1.8-23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512585" comment="pam-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512586" comment="pam-32bit-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512587" comment="pam-doc-1.1.8-24.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513344" comment="pam-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513345" comment="pam-32bit-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513346" comment="pam-doc-1.1.8-24.27.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3432</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3432" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3432" ref_url="https://www.suse.com/security/cve/CVE-2010-3432" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3432/">CVE-2010-3432</cve>
	<bugzilla href="https://bugzilla.suse.com/641983">SUSE bug 641983</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3433</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3433" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3433" ref_url="https://www.suse.com/security/cve/CVE-2010-3433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0903-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00034.html" source="SUSE-SU"/>
    <description>
    The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8.4 before 8.4.5, and 9.0 before 9.0.1 do not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function, as demonstrated by (1) redefining standard functions or (2) redefining operators, a different vulnerability than CVE-2010-1168, CVE-2010-1169, CVE-2010-1170, and CVE-2010-1447.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3433/">CVE-2010-3433</cve>
	<bugzilla href="https://bugzilla.suse.com/643771">SUSE bug 643771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648140">SUSE bug 648140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3436</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3436" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3436" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3436" ref_url="https://www.suse.com/security/cve/CVE-2010-3436" source="SUSE CVE"/>
    <description>
    fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3436/">CVE-2010-3436</cve>
	<bugzilla href="https://bugzilla.suse.com/642733">SUSE bug 642733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3437</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3437" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3437" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3437" ref_url="https://www.suse.com/security/cve/CVE-2010-3437" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3437/">CVE-2010-3437</cve>
	<bugzilla href="https://bugzilla.suse.com/642486">SUSE bug 642486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3442</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3442" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3442" ref_url="https://www.suse.com/security/cve/CVE-2010-3442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) SNDRV_CTL_IOCTL_ELEM_ADD or (2) SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3442/">CVE-2010-3442</cve>
	<bugzilla href="https://bugzilla.suse.com/642484">SUSE bug 642484</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3445</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3445" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3445" ref_url="https://www.suse.com/security/cve/CVE-2010-3445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a long string in an unknown ASN.1/BER encoded packet, as demonstrated using SNMP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3445/">CVE-2010-3445</cve>
	<bugzilla href="https://bugzilla.suse.com/643078">SUSE bug 643078</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3448</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3448" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3448" ref_url="https://www.suse.com/security/cve/CVE-2010-3448" source="SUSE CVE"/>
    <description>
    drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service (system hang) via a (1) read or (2) write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3448/">CVE-2010-3448</cve>
	<bugzilla href="https://bugzilla.suse.com/662671">SUSE bug 662671</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3492</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3492" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3492" ref_url="https://www.suse.com/security/cve/CVE-2010-3492" source="SUSE CVE"/>
    <description>
    The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3492/">CVE-2010-3492</cve>
	<bugzilla href="https://bugzilla.suse.com/638233">SUSE bug 638233</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3493</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3493" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3493" ref_url="https://www.suse.com/security/cve/CVE-2010-3493" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1049-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1051-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00028.html" source="SUSE-SU"/>
    <description>
    Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3493/">CVE-2010-3493</cve>
	<bugzilla href="https://bugzilla.suse.com/638233">SUSE bug 638233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/666027">SUSE bug 666027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3541</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3541" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3541" ref_url="https://www.suse.com/security/cve/CVE-2010-3541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3541/">CVE-2010-3541</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3548</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3548" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3548" ref_url="https://www.suse.com/security/cve/CVE-2010-3548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to determine internal IP addresses or "otherwise-protected internal network names."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3548/">CVE-2010-3548</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3549</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3549" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3549" ref_url="https://www.suse.com/security/cve/CVE-2010-3549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3549/">CVE-2010-3549</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3550</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3550" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3550" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3550" ref_url="https://www.suse.com/security/cve/CVE-2010-3550" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3550/">CVE-2010-3550</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3551</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3551" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3551" ref_url="https://www.suse.com/security/cve/CVE-2010-3551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3551/">CVE-2010-3551</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3553</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3553" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3553" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3553" ref_url="https://www.suse.com/security/cve/CVE-2010-3553" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is related to unsafe reflection involving the UIDefault.ProxyLazyValue class.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3553/">CVE-2010-3553</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663679">SUSE bug 663679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3555</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3555" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3555" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3555" ref_url="https://www.suse.com/security/cve/CVE-2010-3555" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3555/">CVE-2010-3555</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3556</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3556" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3556" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3556" ref_url="https://www.suse.com/security/cve/CVE-2010-3556" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3556/">CVE-2010-3556</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3557</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3557" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3557" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3557" ref_url="https://www.suse.com/security/cve/CVE-2010-3557" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is related to the modification of "behavior and state of certain JDK classes" and "mutable static."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3557/">CVE-2010-3557</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663679">SUSE bug 663679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3558</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3558" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3558" ref_url="https://www.suse.com/security/cve/CVE-2010-3558" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3558/">CVE-2010-3558</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3559</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3559" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3559" ref_url="https://www.suse.com/security/cve/CVE-2010-3559" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this involves an incorrect sign extension in the HeadspaceSoundbank.nGetName function, which allows attackers to execute arbitrary code via a crafted BANK record that leads to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3559/">CVE-2010-3559</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3560</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3560" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3560" ref_url="https://www.suse.com/security/cve/CVE-2010-3560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3560/">CVE-2010-3560</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3562</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3562" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3562" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3562" ref_url="https://www.suse.com/security/cve/CVE-2010-3562" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3562/">CVE-2010-3562</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3563</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3563" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3563" ref_url="https://www.suse.com/security/cve/CVE-2010-3563" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to "how Web Start retrieves security policies," BasicServiceImpl, and forged policies that bypass sandbox restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3563/">CVE-2010-3563</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3565</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3565" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3565" ref_url="https://www.suse.com/security/cve/CVE-2010-3565" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is an integer overflow that triggers memory corruption via large values in a subsample of a JPEG image, related to JPEGImageWriter.writeImage in the imageio API.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3565/">CVE-2010-3565</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3566</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3566" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3566" ref_url="https://www.suse.com/security/cve/CVE-2010-3566" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is an integer overflow that leads to a buffer overflow via a crafted devs (device information) tag structure in a color profile.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3566/">CVE-2010-3566</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3567</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3567" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3567" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3567" ref_url="https://www.suse.com/security/cve/CVE-2010-3567" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is related to a calculation error in right-to-left text character counts for the ICU OpenType font rendering implementation, which triggers an out-of-bounds memory access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3567/">CVE-2010-3567</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3568</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3568" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3568" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3568" ref_url="https://www.suse.com/security/cve/CVE-2010-3568" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is a race condition related to deserialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3568/">CVE-2010-3568</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3569</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3569" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3569" ref_url="https://www.suse.com/security/cve/CVE-2010-3569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to execute arbitrary code by causing the defaultReadObject method in the Serialization API to set a volatile field multiple times.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3569/">CVE-2010-3569</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3571</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3571" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3571" ref_url="https://www.suse.com/security/cve/CVE-2010-3571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the color profile parser that allows remote attackers to execute arbitrary code via a crafted Tag structure in a color profile.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3571/">CVE-2010-3571</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663679">SUSE bug 663679</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3572</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3572" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3572" ref_url="https://www.suse.com/security/cve/CVE-2010-3572" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:061" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3572/">CVE-2010-3572</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/646906">SUSE bug 646906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3573</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3573" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3573" ref_url="https://www.suse.com/security/cve/CVE-2010-3573" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3573/">CVE-2010-3573</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3574</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3574" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3574" ref_url="https://www.suse.com/security/cve/CVE-2010-3574" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0754-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-10/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0957-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3574/">CVE-2010-3574</cve>
	<bugzilla href="https://bugzilla.suse.com/646073">SUSE bug 646073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/648950">SUSE bug 648950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/658525">SUSE bug 658525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/659926">SUSE bug 659926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663953">SUSE bug 663953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679560">SUSE bug 679560</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3609</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3609" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3609" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3609" ref_url="https://www.suse.com/security/cve/CVE-2010-3609" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2010:0992-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00039.html" source="SUSE-SU"/>
    <description>
    The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3609/">CVE-2010-3609</cve>
	<bugzilla href="https://bugzilla.suse.com/642571">SUSE bug 642571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131800" comment="openslp-devel-2.0.0-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131843" comment="openslp-devel-2.0.0-17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144977" comment="openslp-devel-2.0.0-2.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145176" comment="openslp-devel-2.0.0-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513866" comment="openslp-devel-2.0.0-18.17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514235" comment="openslp-devel-2.0.0-18.20.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131123" comment="openslp-2.0.0-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131124" comment="openslp-32bit-2.0.0-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131940" comment="openslp-server-2.0.0-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131123" comment="openslp-2.0.0-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131124" comment="openslp-32bit-2.0.0-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131123" comment="openslp-2.0.0-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131940" comment="openslp-server-2.0.0-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131298" comment="openslp-2.0.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131299" comment="openslp-32bit-2.0.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131966" comment="openslp-server-2.0.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131298" comment="openslp-2.0.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131299" comment="openslp-32bit-2.0.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141760" comment="openslp-2.0.0-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141761" comment="openslp-32bit-2.0.0-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143265" comment="openslp-server-2.0.0-2.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141760" comment="openslp-2.0.0-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141761" comment="openslp-32bit-2.0.0-2.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142041" comment="openslp-2.0.0-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142042" comment="openslp-32bit-2.0.0-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143369" comment="openslp-server-2.0.0-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142041" comment="openslp-2.0.0-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142042" comment="openslp-32bit-2.0.0-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512581" comment="openslp-2.0.0-18.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512582" comment="openslp-32bit-2.0.0-18.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513559" comment="openslp-server-2.0.0-18.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512581" comment="openslp-2.0.0-18.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512582" comment="openslp-32bit-2.0.0-18.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513334" comment="openslp-2.0.0-18.20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513335" comment="openslp-32bit-2.0.0-18.20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513336" comment="openslp-server-2.0.0-18.20.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3611</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3611" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3611" ref_url="https://www.suse.com/security/cve/CVE-2010-3611" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-test-2010:36899-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00006.html" source="SUSE-SU"/>
    <description>
    ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3611/">CVE-2010-3611</cve>
	<bugzilla href="https://bugzilla.suse.com/650902">SUSE bug 650902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/667655">SUSE bug 667655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3613</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3613" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3613" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3613" ref_url="https://www.suse.com/security/cve/CVE-2010-3613" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2010:1031-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00018.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3613/">CVE-2010-3613</cve>
	<bugzilla href="https://bugzilla.suse.com/657129">SUSE bug 657129</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3614</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3614" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3614" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3614" ref_url="https://www.suse.com/security/cve/CVE-2010-3614" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2010:1031-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00018.html" source="SUSE-SU"/>
    <description>
    named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3614/">CVE-2010-3614</cve>
	<bugzilla href="https://bugzilla.suse.com/657102">SUSE bug 657102</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3615</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3615" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3615" ref_url="https://www.suse.com/security/cve/CVE-2010-3615" source="SUSE CVE"/>
    <description>
    named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3615/">CVE-2010-3615</cve>
	<bugzilla href="https://bugzilla.suse.com/657120">SUSE bug 657120</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3616</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3616" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3616" ref_url="https://www.suse.com/security/cve/CVE-2010-3616" source="SUSE CVE"/>
    <description>
    ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3616/">CVE-2010-3616</cve>
	<bugzilla href="https://bugzilla.suse.com/659059">SUSE bug 659059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3654</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3654" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3654" ref_url="https://www.suse.com/security/cve/CVE-2010-3654" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:055" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:058" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-test-2010:36965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00005.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3654/">CVE-2010-3654</cve>
	<bugzilla href="https://bugzilla.suse.com/650145">SUSE bug 650145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/651232">SUSE bug 651232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/656765">SUSE bug 656765</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3698</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3698" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3698" ref_url="https://www.suse.com/security/cve/CVE-2010-3698" source="SUSE CVE"/>
    <description>
    The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3698/">CVE-2010-3698</cve>
	<bugzilla href="https://bugzilla.suse.com/1161450">SUSE bug 1161450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3705</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3705" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3705" ref_url="https://www.suse.com/security/cve/CVE-2010-3705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate the hmac_ids array of an SCTP peer, which allows remote attackers to cause a denial of service (memory corruption and panic) via a crafted value in the last element of this array.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3705/">CVE-2010-3705</cve>
	<bugzilla href="https://bugzilla.suse.com/643513">SUSE bug 643513</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3709</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3709" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3709" ref_url="https://www.suse.com/security/cve/CVE-2010-3709" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00002.html" source="SUSE-SU"/>
    <description>
    The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3709/">CVE-2010-3709</cve>
	<bugzilla href="https://bugzilla.suse.com/660102">SUSE bug 660102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336869" comment="apache2-mod_php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333962" comment="php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336870" comment="php5-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336871" comment="php5-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336872" comment="php5-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336873" comment="php5-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336874" comment="php5-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336875" comment="php5-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336877" comment="php5-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728404" comment="php5-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336878" comment="php5-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336879" comment="php5-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728405" comment="php5-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728406" comment="php5-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336880" comment="php5-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336881" comment="php5-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336882" comment="php5-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336883" comment="php5-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336885" comment="php5-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336913" comment="php5-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728407" comment="php5-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336886" comment="php5-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336887" comment="php5-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336888" comment="php5-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336889" comment="php5-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336890" comment="php5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336891" comment="php5-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728408" comment="php5-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336892" comment="php5-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336893" comment="php5-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336894" comment="php5-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336895" comment="php5-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336896" comment="php5-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728409" comment="php5-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336915" comment="php5-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336897" comment="php5-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336898" comment="php5-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336899" comment="php5-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336900" comment="php5-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336917" comment="php5-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336918" comment="php5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336901" comment="php5-suhosin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336902" comment="php5-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336903" comment="php5-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336904" comment="php5-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336905" comment="php5-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336906" comment="php5-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336907" comment="php5-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336908" comment="php5-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336909" comment="php5-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336910" comment="php5-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336911" comment="php5-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336912" comment="php5-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728413" comment="apache2-mod_php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333971" comment="php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728414" comment="php72-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728415" comment="php72-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728416" comment="php72-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728417" comment="php72-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728418" comment="php72-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728419" comment="php72-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728420" comment="php72-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728421" comment="php72-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728422" comment="php72-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728423" comment="php72-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728424" comment="php72-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728425" comment="php72-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728426" comment="php72-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728427" comment="php72-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728428" comment="php72-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728429" comment="php72-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728430" comment="php72-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728431" comment="php72-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728432" comment="php72-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728433" comment="php72-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728434" comment="php72-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728435" comment="php72-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728436" comment="php72-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728437" comment="php72-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728438" comment="php72-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728439" comment="php72-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728440" comment="php72-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728441" comment="php72-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728442" comment="php72-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728443" comment="php72-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728444" comment="php72-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728445" comment="php72-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728446" comment="php72-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728447" comment="php72-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728448" comment="php72-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728449" comment="php72-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728450" comment="php72-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728451" comment="php72-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728452" comment="php72-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728453" comment="php72-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728454" comment="php72-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728455" comment="php72-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728456" comment="php72-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728457" comment="php72-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728458" comment="php72-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728459" comment="php72-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728460" comment="php72-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728461" comment="php72-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728462" comment="php72-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728463" comment="php72-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728464" comment="php72-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728465" comment="php72-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728466" comment="php72-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728467" comment="apache2-mod_php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728468" comment="php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728469" comment="php74-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728470" comment="php74-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728471" comment="php74-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728472" comment="php74-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728473" comment="php74-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728474" comment="php74-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728475" comment="php74-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728476" comment="php74-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728477" comment="php74-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728478" comment="php74-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728479" comment="php74-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728480" comment="php74-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728481" comment="php74-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728482" comment="php74-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728483" comment="php74-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728484" comment="php74-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728485" comment="php74-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728486" comment="php74-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728487" comment="php74-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728488" comment="php74-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728489" comment="php74-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728490" comment="php74-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728491" comment="php74-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728492" comment="php74-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728493" comment="php74-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728494" comment="php74-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728495" comment="php74-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728496" comment="php74-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728497" comment="php74-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728498" comment="php74-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728499" comment="php74-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728500" comment="php74-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728501" comment="php74-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728502" comment="php74-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728503" comment="php74-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728504" comment="php74-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728505" comment="php74-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728506" comment="php74-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728507" comment="php74-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728508" comment="php74-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728509" comment="php74-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728510" comment="php74-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728511" comment="php74-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728512" comment="php74-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728513" comment="php74-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728514" comment="php74-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728515" comment="php74-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728516" comment="php74-zlib is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3710</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3710" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3710" ref_url="https://www.suse.com/security/cve/CVE-2010-3710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1012-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00006.html" source="SUSE-SU"/>
    <description>
    Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3710/">CVE-2010-3710</cve>
	<bugzilla href="https://bugzilla.suse.com/649210">SUSE bug 649210</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3711</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3711" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3711" ref_url="https://www.suse.com/security/cve/CVE-2010-3711" source="SUSE CVE"/>
    <description>
    libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3711/">CVE-2010-3711</cve>
	<bugzilla href="https://bugzilla.suse.com/648273">SUSE bug 648273</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3765</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3765" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3765" ref_url="https://www.suse.com/security/cve/CVE-2010-3765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:056" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0924-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-31"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3765/">CVE-2010-3765</cve>
	<bugzilla href="https://bugzilla.suse.com/649492">SUSE bug 649492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/652858">SUSE bug 652858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3814</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3814" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3814" ref_url="https://www.suse.com/security/cve/CVE-2010-3814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0361-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00057.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3814/">CVE-2010-3814</cve>
	<bugzilla href="https://bugzilla.suse.com/647375">SUSE bug 647375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/689174">SUSE bug 689174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3848</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3848" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3848" ref_url="https://www.suse.com/security/cve/CVE-2010-3848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3848/">CVE-2010-3848</cve>
	<bugzilla href="https://bugzilla.suse.com/647632">SUSE bug 647632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3849</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3849" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3849" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3849" ref_url="https://www.suse.com/security/cve/CVE-2010-3849" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3849/">CVE-2010-3849</cve>
	<bugzilla href="https://bugzilla.suse.com/647632">SUSE bug 647632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3850</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3850" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3850" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3850" ref_url="https://www.suse.com/security/cve/CVE-2010-3850" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-24"/>
	<updated date="2023-02-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3850/">CVE-2010-3850</cve>
	<bugzilla href="https://bugzilla.suse.com/647632">SUSE bug 647632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/658461">SUSE bug 658461</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3853</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3853" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3853" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3853" ref_url="https://www.suse.com/security/cve/CVE-2010-3853" source="SUSE CVE"/>
    <description>
    pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3853/">CVE-2010-3853</cve>
	<bugzilla href="https://bugzilla.suse.com/647958">SUSE bug 647958</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144979" comment="pam-devel-1.1.8-11.57 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145178" comment="pam-devel-1.1.8-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155981" comment="pam-devel-1.1.8-23.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513868" comment="pam-devel-1.1.8-24.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514236" comment="pam-devel-1.1.8-24.27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141057" comment="pam-32bit-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141764" comment="pam-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141765" comment="pam-32bit-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141766" comment="pam-doc-1.1.8-11.57 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155972" comment="pam-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155973" comment="pam-32bit-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155974" comment="pam-doc-1.1.8-23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512585" comment="pam-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512586" comment="pam-32bit-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512587" comment="pam-doc-1.1.8-24.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513344" comment="pam-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513345" comment="pam-32bit-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513346" comment="pam-doc-1.1.8-24.27.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3855</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3855" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3855" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3855" ref_url="https://www.suse.com/security/cve/CVE-2010-3855" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0361-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00057.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3855/">CVE-2010-3855</cve>
	<bugzilla href="https://bugzilla.suse.com/647375">SUSE bug 647375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/689174">SUSE bug 689174</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3858</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3858" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3858" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3858" ref_url="https://www.suse.com/security/cve/CVE-2010-3858" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
    <description>
    The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3858/">CVE-2010-3858</cve>
	<bugzilla href="https://bugzilla.suse.com/648302">SUSE bug 648302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/655220">SUSE bug 655220</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3861</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3861" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3861" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3861" ref_url="https://www.suse.com/security/cve/CVE-2010-3861" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value, a different vulnerability than CVE-2010-2478.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3861/">CVE-2010-3861</cve>
	<bugzilla href="https://bugzilla.suse.com/649187">SUSE bug 649187</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3864</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3864" ref_url="https://www.suse.com/security/cve/CVE-2010-3864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0965-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:0965-2" ref_url="https://lists.opensuse.org/opensuse-updates/2010-11/msg00030.html" source="SUSE-SU"/>
    <description>
    Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3864/">CVE-2010-3864</cve>
	<bugzilla href="https://bugzilla.suse.com/629905">SUSE bug 629905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/651003">SUSE bug 651003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3865</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3865" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3865" ref_url="https://www.suse.com/security/cve/CVE-2010-3865" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets (RDS) request, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3865/">CVE-2010-3865</cve>
	<bugzilla href="https://bugzilla.suse.com/650128">SUSE bug 650128</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3873</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3873" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3873" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3873" ref_url="https://www.suse.com/security/cve/CVE-2010-3873" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service (heap memory corruption and panic) or possibly have unspecified other impact via malformed (1) X25_FAC_CALLING_AE or (2) X25_FAC_CALLED_AE data, related to net/x25/x25_facilities.c and net/x25/x25_in.c, a different vulnerability than CVE-2010-4164.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3873/">CVE-2010-3873</cve>
	<bugzilla href="https://bugzilla.suse.com/651219">SUSE bug 651219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/653260">SUSE bug 653260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103874" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3874</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3874" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3874" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3874" ref_url="https://www.suse.com/security/cve/CVE-2010-3874" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3874/">CVE-2010-3874</cve>
	<bugzilla href="https://bugzilla.suse.com/651218">SUSE bug 651218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3875</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3875" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3875" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3875" ref_url="https://www.suse.com/security/cve/CVE-2010-3875" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-19"/>
	<updated date="2023-02-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3875/">CVE-2010-3875</cve>
	<bugzilla href="https://bugzilla.suse.com/650897">SUSE bug 650897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3876</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3876" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3876" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3876" ref_url="https://www.suse.com/security/cve/CVE-2010-3876" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_RAW capability to read copies of the applicable structures.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3876/">CVE-2010-3876</cve>
	<bugzilla href="https://bugzilla.suse.com/650897">SUSE bug 650897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3877</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3877" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3877" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3877" ref_url="https://www.suse.com/security/cve/CVE-2010-3877" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-24"/>
	<updated date="2023-02-24"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3877/">CVE-2010-3877</cve>
	<bugzilla href="https://bugzilla.suse.com/650897">SUSE bug 650897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3880</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3880" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3880" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3880" ref_url="https://www.suse.com/security/cve/CVE-2010-3880" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message that contains multiple attribute elements, as demonstrated by INET_DIAG_BC_JMP instructions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3880/">CVE-2010-3880</cve>
	<bugzilla href="https://bugzilla.suse.com/651599">SUSE bug 651599</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3881</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3881" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3881" ref_url="https://www.suse.com/security/cve/CVE-2010-3881" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-03-01"/>
	<updated date="2023-03-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3881/">CVE-2010-3881</cve>
	<bugzilla href="https://bugzilla.suse.com/651596">SUSE bug 651596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/662663">SUSE bug 662663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/706696">SUSE bug 706696</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3904</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-3904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3904" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-3904" ref_url="https://www.suse.com/security/cve/CVE-2010-3904" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:053" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2010:057" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-19"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3904/">CVE-2010-3904</cve>
	<bugzilla href="https://bugzilla.suse.com/647392">SUSE bug 647392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/676707">SUSE bug 676707</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/703752">SUSE bug 703752</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4000</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4000" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4000" ref_url="https://www.suse.com/security/cve/CVE-2010-4000" source="SUSE CVE"/>
    <description>
    gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4000/">CVE-2010-4000</cve>
	<bugzilla href="https://bugzilla.suse.com/642827">SUSE bug 642827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141407" comment="gnome-shell-calendar-3.10.4-22.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141884" comment="gnome-shell-calendar-3.10.4-40.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142112" comment="gnome-shell-calendar-3.20.4-70.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144778" comment="gnome-shell-devel-3.10.4-22.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145040" comment="gnome-shell-devel-3.10.4-40.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145245" comment="gnome-shell-devel-3.20.4-70.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159645" comment="gnome-shell-calendar-3.20.4-76.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159762" comment="gnome-shell-devel-3.20.4-76.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512170" comment="gnome-shell-calendar-3.20.4-77.17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513678" comment="gnome-shell-devel-3.20.4-77.17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513984" comment="gnome-shell-devel-3.20.4-77.23.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514284" comment="gnome-shell-calendar-3.20.4-77.23.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140640" comment="gnome-shell-3.20.4-70.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140641" comment="gnome-shell-browser-plugin-3.20.4-70.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140642" comment="gnome-shell-lang-3.20.4-70.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140640" comment="gnome-shell-3.20.4-70.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140641" comment="gnome-shell-browser-plugin-3.20.4-70.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142112" comment="gnome-shell-calendar-3.20.4-70.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140642" comment="gnome-shell-lang-3.20.4-70.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141405" comment="gnome-shell-3.10.4-22.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141406" comment="gnome-shell-browser-plugin-3.10.4-22.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141407" comment="gnome-shell-calendar-3.10.4-22.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141408" comment="gnome-shell-lang-3.10.4-22.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141882" comment="gnome-shell-3.10.4-40.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141883" comment="gnome-shell-browser-plugin-3.10.4-40.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141884" comment="gnome-shell-calendar-3.10.4-40.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141885" comment="gnome-shell-lang-3.10.4-40.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141882" comment="gnome-shell-3.10.4-40.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141883" comment="gnome-shell-browser-plugin-3.10.4-40.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141885" comment="gnome-shell-lang-3.10.4-40.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143197" comment="gnome-shell-3.10.4-22.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143198" comment="gnome-shell-browser-plugin-3.10.4-22.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143199" comment="gnome-shell-lang-3.10.4-22.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159001" comment="gnome-shell-3.20.4-76.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159002" comment="gnome-shell-browser-plugin-3.20.4-76.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159003" comment="gnome-shell-lang-3.20.4-76.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159001" comment="gnome-shell-3.20.4-76.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159002" comment="gnome-shell-browser-plugin-3.20.4-76.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159645" comment="gnome-shell-calendar-3.20.4-76.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159003" comment="gnome-shell-lang-3.20.4-76.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512168" comment="gnome-shell-3.20.4-77.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512169" comment="gnome-shell-browser-plugin-3.20.4-77.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512170" comment="gnome-shell-calendar-3.20.4-77.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512171" comment="gnome-shell-lang-3.20.4-77.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512168" comment="gnome-shell-3.20.4-77.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512169" comment="gnome-shell-browser-plugin-3.20.4-77.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512171" comment="gnome-shell-lang-3.20.4-77.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512891" comment="gnome-shell-3.20.4-77.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512892" comment="gnome-shell-browser-plugin-3.20.4-77.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512893" comment="gnome-shell-lang-3.20.4-77.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4008</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4008" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4008" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4008" ref_url="https://www.suse.com/security/cve/CVE-2010-4008" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00001.html" source="SUSE-SU"/>
    <description>
    libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4008/">CVE-2010-4008</cve>
	<bugzilla href="https://bugzilla.suse.com/648277">SUSE bug 648277</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335708" comment="libxml2-2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335709" comment="libxml2-2-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335711" comment="libxml2-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335710" comment="libxml2-tools is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4020</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4020" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4020" ref_url="https://www.suse.com/security/cve/CVE-2010-4020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7008287" ref_url="https://www.suse.com/support/kb/doc/?id=7008287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1053-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00030.html" source="SUSE-SU"/>
    <description>
    MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2010-4020/">CVE-2010-4020</cve>
	<bugzilla href="https://bugzilla.suse.com/650650">SUSE bug 650650</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4021</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4021" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4021" ref_url="https://www.suse.com/security/cve/CVE-2010-4021" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2010:023" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2010:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="TID7008287" ref_url="https://www.suse.com/support/kb/doc/?id=7008287" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2010:1053-1" ref_url="https://lists.opensuse.org/opensuse-updates/2010-12/msg00030.html" source="SUSE-SU"/>
    <description>
    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4021/">CVE-2010-4021</cve>
	<bugzilla href="https://bugzilla.suse.com/650650">SUSE bug 650650</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4022</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4022" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4022" ref_url="https://www.suse.com/security/cve/CVE-2010-4022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="TID7008007" ref_url="https://www.suse.com/support/kb/doc/?id=7008007" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0111-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00009.html" source="SUSE-SU"/>
    <description>
    The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4022/">CVE-2010-4022</cve>
	<bugzilla href="https://bugzilla.suse.com/662665">SUSE bug 662665</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4078</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4078" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4078" ref_url="https://www.suse.com/security/cve/CVE-2010-4078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-26"/>
	<updated date="2023-05-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4078/">CVE-2010-4078</cve>
	<bugzilla href="https://bugzilla.suse.com/642311">SUSE bug 642311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4080</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4080" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4080" ref_url="https://www.suse.com/security/cve/CVE-2010-4080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-26"/>
	<updated date="2023-05-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4080/">CVE-2010-4080</cve>
	<bugzilla href="https://bugzilla.suse.com/642312">SUSE bug 642312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4081</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4081" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4081" ref_url="https://www.suse.com/security/cve/CVE-2010-4081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-21"/>
	<updated date="2023-05-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4081/">CVE-2010-4081</cve>
	<bugzilla href="https://bugzilla.suse.com/642312">SUSE bug 642312</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4150</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4150" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4150" ref_url="https://www.suse.com/security/cve/CVE-2010-4150" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00002.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4150/">CVE-2010-4150</cve>
	<bugzilla href="https://bugzilla.suse.com/655968">SUSE bug 655968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4157</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4157" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4157" ref_url="https://www.suse.com/security/cve/CVE-2010-4157" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4157/">CVE-2010-4157</cve>
	<bugzilla href="https://bugzilla.suse.com/652940">SUSE bug 652940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4158</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4158" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4158" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4158" ref_url="https://www.suse.com/security/cve/CVE-2010-4158" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4158/">CVE-2010-4158</cve>
	<bugzilla href="https://bugzilla.suse.com/652563">SUSE bug 652563</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4160</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4160" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4160" ref_url="https://www.suse.com/security/cve/CVE-2010-4160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4160/">CVE-2010-4160</cve>
	<bugzilla href="https://bugzilla.suse.com/652939">SUSE bug 652939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4162</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4162" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4162" ref_url="https://www.suse.com/security/cve/CVE-2010-4162" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2010:060" ref_url="https://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4162/">CVE-2010-4162</cve>
	<bugzilla href="https://bugzilla.suse.com/652945">SUSE bug 652945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4163</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4163" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4163" ref_url="https://www.suse.com/security/cve/CVE-2010-4163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4163/">CVE-2010-4163</cve>
	<bugzilla href="https://bugzilla.suse.com/652945">SUSE bug 652945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/662202">SUSE bug 662202</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4165</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4165" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4165" ref_url="https://www.suse.com/security/cve/CVE-2010-4165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4165/">CVE-2010-4165</cve>
	<bugzilla href="https://bugzilla.suse.com/653258">SUSE bug 653258</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4169</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4169" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4169" ref_url="https://www.suse.com/security/cve/CVE-2010-4169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4169/">CVE-2010-4169</cve>
	<bugzilla href="https://bugzilla.suse.com/653930">SUSE bug 653930</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4170</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4170" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4170" ref_url="https://www.suse.com/security/cve/CVE-2010-4170" source="SUSE CVE"/>
    <description>
    The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-4170/">CVE-2010-4170</cve>
	<bugzilla href="https://bugzilla.suse.com/1085465">SUSE bug 1085465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/654201">SUSE bug 654201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715222" comment="systemtap-sdt-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338823" comment="systemtap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715220" comment="systemtap-runtime is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715221" comment="systemtap-server is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4171</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4171" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4171" ref_url="https://www.suse.com/security/cve/CVE-2010-4171" source="SUSE CVE"/>
    <description>
    The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2010-4171/">CVE-2010-4171</cve>
	<bugzilla href="https://bugzilla.suse.com/1085472">SUSE bug 1085472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/654201">SUSE bug 654201</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715222" comment="systemtap-sdt-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338823" comment="systemtap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715220" comment="systemtap-runtime is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715221" comment="systemtap-server is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4180</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4180" ref_url="https://www.suse.com/security/cve/CVE-2010-4180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000519.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0014-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0845-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00032.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4180/">CVE-2010-4180</cve>
	<bugzilla href="https://bugzilla.suse.com/657663">SUSE bug 657663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/674017">SUSE bug 674017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711693">SUSE bug 711693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/724729">SUSE bug 724729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/799454">SUSE bug 799454</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4226</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4226" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4226" ref_url="https://www.suse.com/security/cve/CVE-2010-4226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:3253-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0174-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:3259-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00025.html" source="SUSE-SU"/>
    <description>
    cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4226/">CVE-2010-4226</cve>
	<bugzilla href="https://bugzilla.suse.com/665768">SUSE bug 665768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167986" comment="build-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167988" comment="build-initvm-x86_64-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167989" comment="build-mkbaselibs-20171128-9.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009541088" comment="build-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541089" comment="build-initvm-s390-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541090" comment="build-initvm-x86_64-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541091" comment="build-mkbaselibs-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541092" comment="obs-service-source_validator-0.7-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541093" comment="osc-0.162.0-15.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792115" comment="build-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792116" comment="build-initvm-s390-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792117" comment="build-initvm-x86_64-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792118" comment="build-mkbaselibs-20171128-9.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792119" comment="obs-service-source_validator-0.7-9.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792120" comment="osc-0.162.0-15.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4242</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4242" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4242" ref_url="https://www.suse.com/security/cve/CVE-2010-4242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service (NULL pointer dereference) via vectors related to the Bluetooth driver.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4242/">CVE-2010-4242</cve>
	<bugzilla href="https://bugzilla.suse.com/655451">SUSE bug 655451</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4243</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4243" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4243" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4243" ref_url="https://www.suse.com/security/cve/CVE-2010-4243" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4243/">CVE-2010-4243</cve>
	<bugzilla href="https://bugzilla.suse.com/655220">SUSE bug 655220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746947">SUSE bug 746947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4248</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4248" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4248" ref_url="https://www.suse.com/security/cve/CVE-2010-4248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    Race condition in the __exit_signal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader in the de_thread function in fs/exec.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4248/">CVE-2010-4248</cve>
	<bugzilla href="https://bugzilla.suse.com/655468">SUSE bug 655468</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4249</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4249" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4249" ref_url="https://www.suse.com/security/cve/CVE-2010-4249" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service (system hang) via crafted use of the socketpair and sendmsg system calls for SOCK_SEQPACKET sockets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4249/">CVE-2010-4249</cve>
	<bugzilla href="https://bugzilla.suse.com/655696">SUSE bug 655696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/656153">SUSE bug 656153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4250</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4250" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4250" ref_url="https://www.suse.com/security/cve/CVE-2010-4250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4250/">CVE-2010-4250</cve>
	<bugzilla href="https://bugzilla.suse.com/655693">SUSE bug 655693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4251</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4251" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4251" ref_url="https://www.suse.com/security/cve/CVE-2010-4251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service (memory consumption) by sending a large amount of network traffic, as demonstrated by netperf UDP tests.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-20"/>
	<updated date="2023-02-20"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-4251/">CVE-2010-4251</cve>
	<bugzilla href="https://bugzilla.suse.com/643138">SUSE bug 643138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/655973">SUSE bug 655973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826455">SUSE bug 826455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4252</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4252" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4252" ref_url="https://www.suse.com/security/cve/CVE-2010-4252" source="SUSE CVE"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
    <description>
    OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4252/">CVE-2010-4252</cve>
	<bugzilla href="https://bugzilla.suse.com/657663">SUSE bug 657663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711693">SUSE bug 711693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/724729">SUSE bug 724729</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4256</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4256" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4256" ref_url="https://www.suse.com/security/cve/CVE-2010-4256" source="SUSE CVE"/>
    <description>
    The pipe_fcntl function in fs/pipe.c in the Linux kernel before 2.6.37 does not properly determine whether a file is a named pipe, which allows local users to cause a denial of service via an F_SETPIPE_SZ fcntl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4256/">CVE-2010-4256</cve>
	<bugzilla href="https://bugzilla.suse.com/656483">SUSE bug 656483</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4258</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4258" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4258" ref_url="https://www.suse.com/security/cve/CVE-2010-4258" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0048-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4258/">CVE-2010-4258</cve>
	<bugzilla href="https://bugzilla.suse.com/657350">SUSE bug 657350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4263</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4263" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4263" ref_url="https://www.suse.com/security/cve/CVE-2010-4263" source="SUSE CVE"/>
    <description>
    The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, allows remote attackers to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via a VLAN tagged frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4263/">CVE-2010-4263</cve>
	<bugzilla href="https://bugzilla.suse.com/657716">SUSE bug 657716</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4267</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4267" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4267" ref_url="https://www.suse.com/security/cve/CVE-2010-4267" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0068-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00028.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4267/">CVE-2010-4267</cve>
	<bugzilla href="https://bugzilla.suse.com/336658">SUSE bug 336658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/808355">SUSE bug 808355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144779" comment="hplip-devel-3.14.6-3.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145041" comment="hplip-devel-3.14.6-3.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159763" comment="hplip-devel-3.16.11-1.33 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140679" comment="hplip-3.14.6-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140680" comment="hplip-hpijs-3.14.6-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140681" comment="hplip-sane-3.14.6-3.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141414" comment="hplip-3.14.6-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141415" comment="hplip-hpijs-3.14.6-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141416" comment="hplip-sane-3.14.6-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159029" comment="hplip-3.16.11-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159030" comment="hplip-hpijs-3.16.11-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159031" comment="hplip-sane-3.16.11-1.33 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4300</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4300" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4300" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4300" ref_url="https://www.suse.com/security/cve/CVE-2010-4300" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00012.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4300/">CVE-2010-4300</cve>
	<bugzilla href="https://bugzilla.suse.com/655448">SUSE bug 655448</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4301</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4301" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4301" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4301" ref_url="https://www.suse.com/security/cve/CVE-2010-4301" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0010-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00012.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted ZCL packet, related to Discover Attributes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4301/">CVE-2010-4301</cve>
	<bugzilla href="https://bugzilla.suse.com/655448">SUSE bug 655448</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4341</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4341" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4341" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4341" ref_url="https://www.suse.com/security/cve/CVE-2010-4341" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0058-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00025.html" source="SUSE-SU"/>
    <description>
    The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4341/">CVE-2010-4341</cve>
	<bugzilla href="https://bugzilla.suse.com/660481">SUSE bug 660481</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140853" comment="sssd-32bit-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141537" comment="libipa_hbac0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141538" comment="libsss_idmap0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141539" comment="python-sssd-config-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141540" comment="sssd-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141541" comment="sssd-32bit-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141542" comment="sssd-ad-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141543" comment="sssd-ipa-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141544" comment="sssd-krb5-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141545" comment="sssd-krb5-common-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141546" comment="sssd-ldap-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141547" comment="sssd-proxy-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141548" comment="sssd-tools-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141980" comment="libipa_hbac0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141981" comment="libsss_idmap0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141982" comment="libsss_sudo-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141983" comment="python-sssd-config-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141984" comment="sssd-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141985" comment="sssd-32bit-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141986" comment="sssd-ad-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141987" comment="sssd-ipa-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141988" comment="sssd-krb5-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141989" comment="sssd-krb5-common-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141990" comment="sssd-ldap-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141991" comment="sssd-proxy-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141992" comment="sssd-tools-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144872" comment="libipa_hbac-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144873" comment="libsss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144874" comment="libsss_nss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144875" comment="libsss_nss_idmap0-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145130" comment="libipa_hbac-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145131" comment="libsss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145132" comment="libsss_nss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145133" comment="libsss_nss_idmap0-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145298" comment="libipa_hbac-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145299" comment="libsss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145300" comment="libsss_nss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145301" comment="libsss_nss_idmap0-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159140" comment="libipa_hbac0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159141" comment="libsss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159142" comment="libsss_nss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159143" comment="libsss_sudo-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159144" comment="python-sssd-config-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159145" comment="sssd-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159146" comment="sssd-32bit-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159147" comment="sssd-ad-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159148" comment="sssd-ipa-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159149" comment="sssd-krb5-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159150" comment="sssd-krb5-common-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159151" comment="sssd-ldap-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159152" comment="sssd-proxy-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159153" comment="sssd-tools-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159812" comment="libipa_hbac-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159813" comment="libsss_idmap-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159814" comment="libsss_nss_idmap-devel-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512322" comment="libipa_hbac0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512323" comment="libsss_certmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512324" comment="libsss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512325" comment="libsss_nss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512326" comment="libsss_simpleifp0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166514" comment="libsss_sudo-1.13.4-34.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512327" comment="python-sssd-config-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512328" comment="sssd-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512329" comment="sssd-32bit-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512330" comment="sssd-ad-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512331" comment="sssd-ipa-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512332" comment="sssd-krb5-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512333" comment="sssd-krb5-common-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512334" comment="sssd-ldap-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512335" comment="sssd-proxy-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512336" comment="sssd-tools-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513122" comment="libipa_hbac0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513123" comment="libsss_certmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513124" comment="libsss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513125" comment="libsss_nss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513126" comment="libsss_simpleifp0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513127" comment="python-sssd-config-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513128" comment="sssd-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513129" comment="sssd-32bit-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513130" comment="sssd-ad-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513131" comment="sssd-ipa-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513132" comment="sssd-krb5-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513133" comment="sssd-krb5-common-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513134" comment="sssd-ldap-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513135" comment="sssd-proxy-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513136" comment="sssd-tools-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513732" comment="libipa_hbac-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513733" comment="libsss_idmap-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513734" comment="libsss_nss_idmap-devel-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514066" comment="libipa_hbac-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514067" comment="libsss_idmap-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514068" comment="libsss_nss_idmap-devel-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4342</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4342" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4342" ref_url="https://www.suse.com/security/cve/CVE-2010-4342" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4342/">CVE-2010-4342</cve>
	<bugzilla href="https://bugzilla.suse.com/658461">SUSE bug 658461</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4343</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4343" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4343" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4343" ref_url="https://www.suse.com/security/cve/CVE-2010-4343" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operations on an fc_host statistics file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-4343/">CVE-2010-4343</cve>
	<bugzilla href="https://bugzilla.suse.com/658178">SUSE bug 658178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4346</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4346" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4346" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4346" ref_url="https://www.suse.com/security/cve/CVE-2010-4346" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4346/">CVE-2010-4346</cve>
	<bugzilla href="https://bugzilla.suse.com/658720">SUSE bug 658720</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4347</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4347" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4347" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4347" ref_url="https://www.suse.com/security/cve/CVE-2010-4347" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:001" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4347/">CVE-2010-4347</cve>
	<bugzilla href="https://bugzilla.suse.com/659076">SUSE bug 659076</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4352</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4352" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4352" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4352" ref_url="https://www.suse.com/security/cve/CVE-2010-4352" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0401-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1418-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html" source="SUSE-SU"/>
    <description>
    Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-03"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4352/">CVE-2010-4352</cve>
	<bugzilla href="https://bugzilla.suse.com/659934">SUSE bug 659934</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009107559" comment="dbus-1-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107561" comment="dbus-1-x11-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107564" comment="libdbus-1-3-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107565" comment="libdbus-1-3-32bit-1.8.16-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009107562" comment="dbus-1-devel-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107560" comment="dbus-1-devel-doc-1.8.16-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140535" comment="dbus-1-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140536" comment="dbus-1-x11-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140537" comment="libdbus-1-3-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140538" comment="libdbus-1-3-32bit-1.8.16-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140535" comment="dbus-1-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140536" comment="dbus-1-x11-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140537" comment="libdbus-1-3-1.8.16-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141293" comment="dbus-1-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141294" comment="dbus-1-x11-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141295" comment="libdbus-1-3-1.8.8-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141296" comment="libdbus-1-3-32bit-1.8.8-1.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141293" comment="dbus-1-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141294" comment="dbus-1-x11-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143158" comment="libdbus-1-3-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141296" comment="libdbus-1-3-32bit-1.8.8-1.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144728" comment="dbus-1-devel-1.8.8-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144729" comment="dbus-1-devel-doc-1.8.8-1.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145215" comment="dbus-1-devel-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145216" comment="dbus-1-devel-doc-1.8.16-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158960" comment="dbus-1-1.8.22-28.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158961" comment="dbus-1-x11-1.8.22-28.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158962" comment="libdbus-1-3-1.8.22-28.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158963" comment="libdbus-1-3-32bit-1.8.22-28.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159748" comment="dbus-1-devel-1.8.22-28.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159749" comment="dbus-1-devel-doc-1.8.22-28.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512109" comment="dbus-1-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512110" comment="dbus-1-x11-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512111" comment="libdbus-1-3-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512112" comment="libdbus-1-3-32bit-1.8.22-29.10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512790" comment="dbus-1-1.8.22-9.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512791" comment="dbus-1-x11-1.8.22-9.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512792" comment="libdbus-1-3-1.8.22-9.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512793" comment="libdbus-1-3-32bit-1.8.22-9.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513644" comment="dbus-1-devel-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513645" comment="dbus-1-devel-doc-1.8.22-29.10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513931" comment="dbus-1-devel-1.8.22-9.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513932" comment="dbus-1-devel-doc-1.8.22-9.38 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4410</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4410" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4410" ref_url="https://www.suse.com/security/cve/CVE-2010-4410" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0083-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00032.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4410/">CVE-2010-4410</cve>
	<bugzilla href="https://bugzilla.suse.com/657343">SUSE bug 657343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/660127">SUSE bug 660127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663396">SUSE bug 663396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/670476">SUSE bug 670476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131038" comment="perl-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131039" comment="perl-32bit-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131040" comment="perl-base-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131041" comment="perl-doc-5.18.2-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131038" comment="perl-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131040" comment="perl-base-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131041" comment="perl-doc-5.18.2-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141769" comment="perl-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141770" comment="perl-32bit-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141771" comment="perl-base-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141772" comment="perl-doc-5.18.2-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512589" comment="perl-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512590" comment="perl-32bit-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512591" comment="perl-base-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512592" comment="perl-doc-5.18.2-12.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513347" comment="perl-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513348" comment="perl-32bit-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513349" comment="perl-base-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513350" comment="perl-doc-5.18.2-12.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4411</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4411" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4411" ref_url="https://www.suse.com/security/cve/CVE-2010-4411" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0083-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00032.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4411/">CVE-2010-4411</cve>
	<bugzilla href="https://bugzilla.suse.com/657343">SUSE bug 657343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/657731">SUSE bug 657731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663396">SUSE bug 663396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/669245">SUSE bug 669245</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/670476">SUSE bug 670476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131038" comment="perl-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131039" comment="perl-32bit-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131040" comment="perl-base-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131041" comment="perl-doc-5.18.2-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131038" comment="perl-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131040" comment="perl-base-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131041" comment="perl-doc-5.18.2-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141769" comment="perl-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141770" comment="perl-32bit-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141771" comment="perl-base-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141772" comment="perl-doc-5.18.2-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512589" comment="perl-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512590" comment="perl-32bit-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512591" comment="perl-base-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512592" comment="perl-doc-5.18.2-12.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513347" comment="perl-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513348" comment="perl-32bit-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513349" comment="perl-base-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513350" comment="perl-doc-5.18.2-12.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4422</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4422" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4422" ref_url="https://www.suse.com/security/cve/CVE-2010-4422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-07"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4422/">CVE-2010-4422</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4447</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4447" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4447" ref_url="https://www.suse.com/security/cve/CVE-2010-4447" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Deployment, a different vulnerability than CVE-2010-4475.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-25"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4447/">CVE-2010-4447</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690583">SUSE bug 690583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4448</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4448" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4448" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4448" ref_url="https://www.suse.com/security/cve/CVE-2010-4448" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to Networking.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue involves "DNS cache poisoning by untrusted applets."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-27"/>
	<updated date="2023-04-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4448/">CVE-2010-4448</cve>
	<bugzilla href="https://bugzilla.suse.com/671714">SUSE bug 671714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690583">SUSE bug 690583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4450</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4450" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4450" ref_url="https://www.suse.com/security/cve/CVE-2010-4450" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.2_29 and earlier for Solaris and Linux allows local standalone applications to affect confidentiality, integrity, and availability via unknown vectors related to Launcher.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is an untrusted search path vulnerability involving an empty LD_LIBRARY_PATH environment variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-23"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4450/">CVE-2010-4450</cve>
	<bugzilla href="https://bugzilla.suse.com/671714">SUSE bug 671714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4451</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4451" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4451" ref_url="https://www.suse.com/security/cve/CVE-2010-4451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, when using Java Update, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-23"/>
	<updated date="2023-04-06"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4451/">CVE-2010-4451</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4452</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4452" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4452" ref_url="https://www.suse.com/security/cve/CVE-2010-4452" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4452/">CVE-2010-4452</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4454</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4454" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4454" ref_url="https://www.suse.com/security/cve/CVE-2010-4454" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and unspecified APIs, a different vulnerability than CVE-2010-4462 and CVE-2010-4473.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-25"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4454/">CVE-2010-4454</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690583">SUSE bug 690583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4462</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4462" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4462" ref_url="https://www.suse.com/security/cve/CVE-2010-4462" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and unspecified APIs, a different vulnerability than CVE-2010-4454 and CVE-2010-4473.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2023-04-07"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4462/">CVE-2010-4462</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690583">SUSE bug 690583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4463</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4463" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4463" ref_url="https://www.suse.com/security/cve/CVE-2010-4463" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 21 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-24"/>
	<updated date="2023-04-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4463/">CVE-2010-4463</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4465</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4465" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4465" ref_url="https://www.suse.com/security/cve/CVE-2010-4465" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is related to the lack of framework support by AWT event dispatch, and/or "clipboard access in Applets."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2023-04-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4465/">CVE-2010-4465</cve>
	<bugzilla href="https://bugzilla.suse.com/671714">SUSE bug 671714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690583">SUSE bug 690583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4466</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4466" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4466" ref_url="https://www.suse.com/security/cve/CVE-2010-4466" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, Solaris, and, Linux; 5.0 Update 27 and earlier for Windows; and 1.4.2_29 and earlier for Windows allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-24"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4466/">CVE-2010-4466</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690583">SUSE bug 690583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4467</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4467" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4467" ref_url="https://www.suse.com/security/cve/CVE-2010-4467" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-23"/>
	<updated date="2023-04-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4467/">CVE-2010-4467</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4468</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4468" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4468" ref_url="https://www.suse.com/security/cve/CVE-2010-4468" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to JDBC.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-26"/>
	<updated date="2023-04-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4468/">CVE-2010-4468</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4469</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4469" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4469" ref_url="https://www.suse.com/security/cve/CVE-2010-4469" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and "backward jsrs."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-23"/>
	<updated date="2023-04-08"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4469/">CVE-2010-4469</cve>
	<bugzilla href="https://bugzilla.suse.com/671714">SUSE bug 671714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4470</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4470" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4470" ref_url="https://www.suse.com/security/cve/CVE-2010-4470" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is related to "Features set on SchemaFactory not inherited by Validator."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-23"/>
	<updated date="2023-04-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4470/">CVE-2010-4470</cve>
	<bugzilla href="https://bugzilla.suse.com/671714">SUSE bug 671714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4471</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4471" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4471" ref_url="https://www.suse.com/security/cve/CVE-2010-4471" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue is related to the exposure of system properties via vectors related to Font.createFont and exception text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-24"/>
	<updated date="2023-04-06"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4471/">CVE-2010-4471</cve>
	<bugzilla href="https://bugzilla.suse.com/671714">SUSE bug 671714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4472</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4472" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4472" ref_url="https://www.suse.com/security/cve/CVE-2010-4472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0155-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs.  NOTE: the previous information was obtained from the February 2011 CPU.  Oracle has not commented on claims from a downstream vendor that this issue involves the replacement of the "XML DSig Transform or C14N algorithm implementations."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2023-04-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4472/">CVE-2010-4472</cve>
	<bugzilla href="https://bugzilla.suse.com/671714">SUSE bug 671714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4473</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4473" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4473" ref_url="https://www.suse.com/security/cve/CVE-2010-4473" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound and unspecified APIs, a different vulnerability than CVE-2010-4454 and CVE-2010-4462.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2023-04-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4473/">CVE-2010-4473</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690583">SUSE bug 690583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4474</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4474" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4474" ref_url="https://www.suse.com/security/cve/CVE-2010-4474" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-08-10"/>
	<updated date="2023-04-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4474/">CVE-2010-4474</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4475</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4475" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4475" ref_url="https://www.suse.com/security/cve/CVE-2010-4475" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Deployment, a different vulnerability than CVE-2010-4447.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-07-26"/>
	<updated date="2023-04-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4475/">CVE-2010-4475</cve>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680178">SUSE bug 680178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690583">SUSE bug 690583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4476</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4476" ref_url="https://www.suse.com/security/cve/CVE-2010-4476" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:014" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:024" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0823-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="TID7008129" ref_url="https://www.suse.com/support/kb/doc/?id=7008129" source="SUSE-SU"/>
		<reference ref_id="TID7008485" ref_url="https://www.suse.com/support/kb/doc/?id=7008485" source="SUSE-SU"/>
		<reference ref_id="TID7009197" ref_url="https://www.suse.com/support/kb/doc/?id=7009197" source="SUSE-SU"/>
		<reference ref_id="TID7009249" ref_url="https://www.suse.com/support/kb/doc/?id=7009249" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021874" ref_url="https://www.suse.com/support/kb/doc/?id=7021874" source="SUSE-SU"/>
		<reference ref_id="TID7021875" ref_url="https://www.suse.com/support/kb/doc/?id=7021875" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0126-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00014.html" source="SUSE-SU"/>
    <description>
    The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-08"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4476/">CVE-2010-4476</cve>
	<bugzilla href="https://bugzilla.suse.com/663679">SUSE bug 663679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/663953">SUSE bug 663953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/669926">SUSE bug 669926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/670304">SUSE bug 670304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/671714">SUSE bug 671714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672449">SUSE bug 672449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673738">SUSE bug 673738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673798">SUSE bug 673798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679560">SUSE bug 679560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/683761">SUSE bug 683761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/683762">SUSE bug 683762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/683763">SUSE bug 683763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690583">SUSE bug 690583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4494</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4494" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4494" ref_url="https://www.suse.com/security/cve/CVE-2010-4494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00036.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4494/">CVE-2010-4494</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/661471">SUSE bug 661471</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103734" comment="libxml2-devel-2.9.1-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144964" comment="libxml2-devel-2.9.1-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145350" comment="libxml2-devel-2.9.4-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157778" comment="libxml2-devel-2.9.4-45.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513851" comment="libxml2-devel-2.9.4-46.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514210" comment="libxml2-devel-2.9.4-46.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103736" comment="libxml2-doc-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143262" comment="libxml2-doc-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157775" comment="libxml2-doc-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335708" comment="libxml2-2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335709" comment="libxml2-2-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335711" comment="libxml2-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335710" comment="libxml2-tools is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513557" comment="libxml2-doc-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513309" comment="libxml2-2-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513310" comment="libxml2-2-32bit-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513311" comment="libxml2-doc-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513312" comment="libxml2-tools-2.9.4-46.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4523</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4523" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4523" ref_url="https://www.suse.com/security/cve/CVE-2010-4523" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0049-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4523/">CVE-2010-4523</cve>
	<bugzilla href="https://bugzilla.suse.com/660109">SUSE bug 660109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141044" comment="opensc-0.13.0-1.122 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147599" comment="opensc-0.13.0-1.107 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513333" comment="opensc-0.13.0-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4527</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4527" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4527" ref_url="https://www.suse.com/security/cve/CVE-2010-4527" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel before 2.6.37 incorrectly expects that a certain name field ends with a '\0' character, which allows local users to conduct buffer overflow attacks and gain privileges, or possibly obtain sensitive information from kernel memory, via a SOUND_MIXER_SETLEVELS ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4527/">CVE-2010-4527</cve>
	<bugzilla href="https://bugzilla.suse.com/661945">SUSE bug 661945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4530</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4530" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4530" ref_url="https://www.suse.com/security/cve/CVE-2010-4530" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0092-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Signedness error in ccid_serial.c in libccid in the USB Chip/Smart Card Interface Devices (CCID) driver, as used in pcscd in PCSC-Lite 1.5.3 and possibly other products, allows physically proximate attackers to execute arbitrary code via a smart card with a crafted serial number that causes a negative value to be used in a memcpy operation, which triggers a buffer overflow. NOTE: some sources refer to this issue as an integer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4530/">CVE-2010-4530</cve>
	<bugzilla href="https://bugzilla.suse.com/661000">SUSE bug 661000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141065" comment="pcsc-ccid-1.4.14-1.45 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147603" comment="pcsc-ccid-1.4.14-1.42 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159258" comment="pcsc-ccid-1.4.25-4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4531</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4531" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4531" ref_url="https://www.suse.com/security/cve/CVE-2010-4531" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0092-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00000.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4531/">CVE-2010-4531</cve>
	<bugzilla href="https://bugzilla.suse.com/661000">SUSE bug 661000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141582" comment="libpcsclite1-32bit-1.8.10-3.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147771" comment="libpcsclite1-32bit-1.8.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512378" comment="libpcsclite1-32bit-1.8.10-7.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514305" comment="libpcsclite1-32bit-1.8.10-7.6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140900" comment="libpcsclite1-1.8.10-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140901" comment="pcsc-lite-1.8.10-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140900" comment="libpcsclite1-1.8.10-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141582" comment="libpcsclite1-32bit-1.8.10-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140901" comment="pcsc-lite-1.8.10-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144905" comment="libpcscspy0-1.8.10-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144906" comment="pcsc-lite-devel-1.8.10-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147574" comment="libpcsclite1-1.8.10-3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147575" comment="pcsc-lite-1.8.10-3.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147770" comment="libpcsclite1-1.8.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147771" comment="libpcsclite1-32bit-1.8.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147772" comment="pcsc-lite-1.8.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147770" comment="libpcsclite1-1.8.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147772" comment="pcsc-lite-1.8.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147773" comment="libpcscspy0-1.8.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147774" comment="pcsc-lite-devel-1.8.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512377" comment="libpcsclite1-1.8.10-7.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512378" comment="libpcsclite1-32bit-1.8.10-7.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512379" comment="pcsc-lite-1.8.10-7.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512377" comment="libpcsclite1-1.8.10-7.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512379" comment="pcsc-lite-1.8.10-7.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513200" comment="libpcsclite1-1.8.10-7.6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513201" comment="pcsc-lite-1.8.10-7.6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513768" comment="libpcscspy0-1.8.10-7.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513769" comment="pcsc-lite-devel-1.8.10-7.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514173" comment="libpcscspy0-1.8.10-7.6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514174" comment="pcsc-lite-devel-1.8.10-7.6.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4538</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4538" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4538" ref_url="https://www.suse.com/security/cve/CVE-2010-4538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE) compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4538/">CVE-2010-4538</cve>
	<bugzilla href="https://bugzilla.suse.com/662029">SUSE bug 662029</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4539</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4539" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4539" ref_url="https://www.suse.com/security/cve/CVE-2010-4539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0136-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4539/">CVE-2010-4539</cve>
	<bugzilla href="https://bugzilla.suse.com/662030">SUSE bug 662030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4540</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4540" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4540" ref_url="https://www.suse.com/security/cve/CVE-2010-4540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS &gt; LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4540/">CVE-2010-4540</cve>
	<bugzilla href="https://bugzilla.suse.com/662043">SUSE bug 662043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141368" comment="gimp-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141369" comment="gimp-lang-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141370" comment="gimp-plugins-python-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142102" comment="gimp-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142103" comment="gimp-lang-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142104" comment="gimp-plugins-python-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144763" comment="gimp-devel-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145239" comment="gimp-devel-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150803" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150804" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150805" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150808" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167012" comment="gimp-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167013" comment="gimp-lang-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167014" comment="gimp-plugins-python-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167017" comment="gimp-devel-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4541</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4541" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4541" ref_url="https://www.suse.com/security/cve/CVE-2010-4541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4541/">CVE-2010-4541</cve>
	<bugzilla href="https://bugzilla.suse.com/662043">SUSE bug 662043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141368" comment="gimp-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141369" comment="gimp-lang-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141370" comment="gimp-plugins-python-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142102" comment="gimp-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142103" comment="gimp-lang-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142104" comment="gimp-plugins-python-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144763" comment="gimp-devel-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145239" comment="gimp-devel-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150803" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150804" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150805" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150808" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167012" comment="gimp-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167013" comment="gimp-lang-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167014" comment="gimp-plugins-python-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167017" comment="gimp-devel-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4542</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4542" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4542" ref_url="https://www.suse.com/security/cve/CVE-2010-4542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground field in a plugin configuration file. NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4542/">CVE-2010-4542</cve>
	<bugzilla href="https://bugzilla.suse.com/662043">SUSE bug 662043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141368" comment="gimp-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141369" comment="gimp-lang-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141370" comment="gimp-plugins-python-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142102" comment="gimp-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142103" comment="gimp-lang-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142104" comment="gimp-plugins-python-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144763" comment="gimp-devel-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145239" comment="gimp-devel-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150803" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150804" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150805" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150808" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167012" comment="gimp-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167013" comment="gimp-lang-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167014" comment="gimp-plugins-python-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167017" comment="gimp-devel-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4543</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4543" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4543" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4543" ref_url="https://www.suse.com/security/cve/CVE-2010-4543" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00005.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4543/">CVE-2010-4543</cve>
	<bugzilla href="https://bugzilla.suse.com/662043">SUSE bug 662043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/692877">SUSE bug 692877</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141368" comment="gimp-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141369" comment="gimp-lang-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141370" comment="gimp-plugins-python-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142102" comment="gimp-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142103" comment="gimp-lang-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142104" comment="gimp-plugins-python-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144763" comment="gimp-devel-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145239" comment="gimp-devel-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150803" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150804" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150805" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150808" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167012" comment="gimp-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167013" comment="gimp-lang-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167014" comment="gimp-plugins-python-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167017" comment="gimp-devel-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4565</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4565" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4565" ref_url="https://www.suse.com/security/cve/CVE-2010-4565" source="SUSE CVE"/>
    <description>
    The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4565/">CVE-2010-4565</cve>
	<bugzilla href="https://bugzilla.suse.com/1161355">SUSE bug 1161355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/651218">SUSE bug 651218</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4644</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4644" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4644" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4644" ref_url="https://www.suse.com/security/cve/CVE-2010-4644" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0136-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4644/">CVE-2010-4644</cve>
	<bugzilla href="https://bugzilla.suse.com/662030">SUSE bug 662030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4645</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4645" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4645" ref_url="https://www.suse.com/security/cve/CVE-2010-4645" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00001.html" source="SUSE-SU"/>
    <description>
    strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4645/">CVE-2010-4645</cve>
	<bugzilla href="https://bugzilla.suse.com/662932">SUSE bug 662932</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4648</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4648" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4648" ref_url="https://www.suse.com/security/cve/CVE-2010-4648" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4648/">CVE-2010-4648</cve>
	<bugzilla href="https://bugzilla.suse.com/662951">SUSE bug 662951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4649</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4649" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4649" ref_url="https://www.suse.com/security/cve/CVE-2010-4649" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large value of a certain structure member.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4649/">CVE-2010-4649</cve>
	<bugzilla href="https://bugzilla.suse.com/662953">SUSE bug 662953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4651</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4651" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4651" ref_url="https://www.suse.com/security/cve/CVE-2010-4651" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-05/msg00005.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4651/">CVE-2010-4651</cve>
	<bugzilla href="https://bugzilla.suse.com/1093615">SUSE bug 1093615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101128">SUSE bug 1101128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/662957">SUSE bug 662957</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110205" comment="patch-2.7.5-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141768" comment="patch-2.7.1-5.191 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175223" comment="patch-2.7.5-8.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333929" comment="patch is not affected"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4665</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4665" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4665" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4665" ref_url="https://www.suse.com/security/cve/CVE-2010-4665" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0409-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00079.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4665/">CVE-2010-4665</cve>
	<bugzilla href="https://bugzilla.suse.com/687442">SUSE bug 687442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4777</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4777" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4777" ref_url="https://www.suse.com/security/cve/CVE-2010-4777" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0479-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html" source="SUSE-SU"/>
    <description>
    The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4777/">CVE-2010-4777</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131038" comment="perl-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131039" comment="perl-32bit-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131040" comment="perl-base-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131041" comment="perl-doc-5.18.2-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131038" comment="perl-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131040" comment="perl-base-5.18.2-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131041" comment="perl-doc-5.18.2-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141769" comment="perl-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141770" comment="perl-32bit-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141771" comment="perl-base-5.18.2-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141772" comment="perl-doc-5.18.2-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512589" comment="perl-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512590" comment="perl-32bit-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512591" comment="perl-base-5.18.2-12.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512592" comment="perl-doc-5.18.2-12.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513347" comment="perl-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513348" comment="perl-32bit-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513349" comment="perl-base-5.18.2-12.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513350" comment="perl-doc-5.18.2-12.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4805</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-4805" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4805" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-4805" ref_url="https://www.suse.com/security/cve/CVE-2010-4805" source="SUSE CVE"/>
    <description>
    The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-4805/">CVE-2010-4805</cve>
	<bugzilla href="https://bugzilla.suse.com/698190">SUSE bug 698190</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5107</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5107" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5107" ref_url="https://www.suse.com/security/cve/CVE-2010-5107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1345-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000579.html" source="SUSE-SU"/>
    <description>
    The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-5107/">CVE-2010-5107</cve>
	<bugzilla href="https://bugzilla.suse.com/1074631">SUSE bug 1074631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802639">SUSE bug 802639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841638">SUSE bug 841638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/858359">SUSE bug 858359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880259">SUSE bug 880259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/881234">SUSE bug 881234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5298</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5298" ref_url="https://www.suse.com/security/cve/CVE-2010-5298" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0592-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-05/msg00003.html" source="SUSE-SU"/>
    <description>
    Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-5298/">CVE-2010-5298</cve>
	<bugzilla href="https://bugzilla.suse.com/873351">SUSE bug 873351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880891">SUSE bug 880891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883126">SUSE bug 883126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885777">SUSE bug 885777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131803" comment="libmysqlclient-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131804" comment="libmysqld-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131805" comment="libmysqld18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143361" comment="mariadb-tools-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145144" comment="libmysqlclient-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145145" comment="libmysqld-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145146" comment="libmysqld18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159168" comment="mariadb-tools-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159818" comment="libmysqlclient-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159819" comment="libmysqld-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159820" comment="libmysqld18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513558" comment="mariadb-tools-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513165" comment="libmysqlclient18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513166" comment="libmysqlclient18-32bit-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513324" comment="mariadb-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513167" comment="mariadb-100-errormessages-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513325" comment="mariadb-client-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513326" comment="mariadb-errormessages-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513327" comment="mariadb-tools-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513740" comment="libmysqlclient-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513741" comment="libmysqld-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513742" comment="libmysqld18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514078" comment="libmysqlclient-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514080" comment="libmysqld-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514081" comment="libmysqld18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514300" comment="libmysqlclient_r18-32bit-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514658" comment="libmysqlclient18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514659" comment="libmysqlclient18-32bit-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514660" comment="libmysqlclient_r18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514661" comment="libmysqlclient_r18-32bit-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514662" comment="mariadb-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514663" comment="mariadb-client-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514664" comment="mariadb-errormessages-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514660" comment="libmysqlclient_r18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514661" comment="libmysqlclient_r18-32bit-10.0.16-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009539542" comment="libmysqlclient-devel-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539543" comment="libmysqlclient_r18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539544" comment="libmysqld-devel-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539545" comment="libmysqld18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009543495" comment="libmysqlclient18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543496" comment="libmysqlclient18-32bit-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543497" comment="mariadb-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543498" comment="mariadb-client-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543499" comment="mariadb-errormessages-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543500" comment="mariadb-tools-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009543495" comment="libmysqlclient18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543496" comment="libmysqlclient18-32bit-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543497" comment="mariadb-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543498" comment="mariadb-client-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543499" comment="mariadb-errormessages-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543500" comment="mariadb-tools-10.0.16-15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5304</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5304" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5304" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5304" ref_url="https://www.suse.com/security/cve/CVE-2010-5304" source="SUSE CVE"/>
    <description>
    A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-5304/">CVE-2010-5304</cve>
	<bugzilla href="https://bugzilla.suse.com/897031">SUSE bug 897031</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334130" comment="LibVNCServer is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335713" comment="libvncclient0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335714" comment="libvncserver0 is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5313</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5313" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5313" ref_url="https://www.suse.com/security/cve/CVE-2010-5313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
    <description>
    Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS crash) via a crafted instruction that triggers an L2 emulation failure report, a similar issue to CVE-2014-7842.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-5313/">CVE-2010-5313</cve>
	<bugzilla href="https://bugzilla.suse.com/905312">SUSE bug 905312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/907822">SUSE bug 907822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5321</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5321" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5321" ref_url="https://www.suse.com/security/cve/CVE-2010-5321" source="SUSE CVE"/>
    <description>
    Memory leak in drivers/media/video/videobuf-core.c in the videobuf subsystem in the Linux kernel 2.6.x through 4.x allows local users to cause a denial of service (memory consumption) by leveraging /dev/video access for a series of mmap calls that require new allocations, a different vulnerability than CVE-2007-6761. NOTE: as of 2016-06-18, this affects only 11 drivers that have not been updated to use videobuf2 instead of videobuf.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2010-5321/">CVE-2010-5321</cve>
	<bugzilla href="https://bugzilla.suse.com/1035720">SUSE bug 1035720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/916831">SUSE bug 916831</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5325</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5325" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5325" ref_url="https://www.suse.com/security/cve/CVE-2010-5325" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-5325/">CVE-2010-5325</cve>
	<bugzilla href="https://bugzilla.suse.com/966830">SUSE bug 966830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338824" comment="cups-filters is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715223" comment="cups-filters-cups-browsed is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715224" comment="cups-filters-foomatic-rip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009715225" comment="cups-filters-ghostscript is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5328</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5328" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5328" ref_url="https://www.suse.com/security/cve/CVE-2010-5328" source="SUSE CVE"/>
    <description>
    include/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero from reaching the swapper process, which allows local users to cause a denial of service (system crash) by leveraging access to this process group.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-5328/">CVE-2010-5328</cve>
	<bugzilla href="https://bugzilla.suse.com/1021109">SUSE bug 1021109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105329" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5329</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5329" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5329" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5329" ref_url="https://www.suse.com/security/cve/CVE-2010-5329" source="SUSE CVE"/>
    <description>
    The video_usercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39 relies on the count value of a v4l2_ext_controls data structure to determine a kmalloc size, which might allow local users to cause a denial of service (memory consumption) via a large value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-5329/">CVE-2010-5329</cve>
	<bugzilla href="https://bugzilla.suse.com/1035719">SUSE bug 1035719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105331" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5331</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5331" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5331" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5331" ref_url="https://www.suse.com/security/cve/CVE-2010-5331" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** In the Linux kernel before 2.6.34, a range check issue in drivers/gpu/drm/radeon/atombios.c could cause an off by one (buffer overflow) problem. NOTE: At least one Linux maintainer believes that this CVE is incorrectly assigned and should be rejected because the value is hard coded and are not user-controllable where it is used.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-07"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-5331/">CVE-2010-5331</cve>
	<bugzilla href="https://bugzilla.suse.com/1143173">SUSE bug 1143173</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5332</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2010-5332" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5332" source="CVE"/>
    <reference ref_id="SUSE CVE-2010-5332" ref_url="https://www.suse.com/security/cve/CVE-2010-5332" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4/port.c. When searching for a free entry in either mlx4_register_vlan() or mlx4_register_mac(), and there is no free entry, the loop terminates without updating the local variable free thus causing out of array bounds access.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-08-05"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="5.6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2010-5332/">CVE-2010-5332</cve>
	<bugzilla href="https://bugzilla.suse.com/1143170">SUSE bug 1143170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0006</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0006" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0006" ref_url="https://www.suse.com/security/cve/CVE-2011-0006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
    <description>
    The ima_lsm_rule_init function in security/integrity/ima/ima_policy.c in the Linux kernel before 2.6.37, when the Linux Security Modules (LSM) framework is disabled, allows local users to bypass Integrity Measurement Architecture (IMA) rules in opportunistic circumstances by leveraging an administrator's addition of an IMA rule for LSM.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0006/">CVE-2011-0006</cve>
	<bugzilla href="https://bugzilla.suse.com/662942">SUSE bug 662942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0010</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0010" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0010" ref_url="https://www.suse.com/security/cve/CVE-2011-0010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:002" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0050-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-01/msg00022.html" source="SUSE-SU"/>
    <description>
    check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0010/">CVE-2011-0010</cve>
	<bugzilla href="https://bugzilla.suse.com/663881">SUSE bug 663881</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141130" comment="sudo-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141810" comment="sudo-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144993" comment="sudo-devel-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145367" comment="sudo-devel-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159307" comment="sudo-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159839" comment="sudo-devel-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512620" comment="sudo-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513418" comment="sudo-1.8.27-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513882" comment="sudo-devel-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514252" comment="sudo-devel-1.8.27-2.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110014" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0014</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0014" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0014" ref_url="https://www.suse.com/security/cve/CVE-2011-0014" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-403" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00022.html" source="SUSE-SU"/>
    <description>
    ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0014/">CVE-2011-0014</cve>
	<bugzilla href="https://bugzilla.suse.com/670526">SUSE bug 670526</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0020</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0020" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0020" ref_url="https://www.suse.com/security/cve/CVE-2011-0020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00019.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0020/">CVE-2011-0020</cve>
	<bugzilla href="https://bugzilla.suse.com/666101">SUSE bug 666101</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144980" comment="pango-devel-1.36.3-4.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145360" comment="pango-devel-1.40.1-9.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140897" comment="libpango-1_0-0-1.40.1-9.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140898" comment="libpango-1_0-0-32bit-1.40.1-9.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140899" comment="typelib-1_0-Pango-1_0-1.40.1-9.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140897" comment="libpango-1_0-0-1.40.1-9.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140899" comment="typelib-1_0-Pango-1_0-1.40.1-9.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141577" comment="libpango-1_0-0-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141578" comment="libpango-1_0-0-32bit-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141579" comment="pango-modules-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141580" comment="pango-modules-32bit-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141581" comment="typelib-1_0-Pango-1_0-1.36.3-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143242" comment="libpango-1_0-0-1.36.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141578" comment="libpango-1_0-0-32bit-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143243" comment="pango-modules-1.36.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141580" comment="pango-modules-32bit-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143244" comment="typelib-1_0-Pango-1_0-1.36.3-4.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0024</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0024" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0024" ref_url="https://www.suse.com/security/cve/CVE-2011-0024" source="SUSE CVE"/>
    <description>
    Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted capture file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0024/">CVE-2011-0024</cve>
	<bugzilla href="https://bugzilla.suse.com/683335">SUSE bug 683335</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0064</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0064" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0064" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0064" ref_url="https://www.suse.com/security/cve/CVE-2011-0064" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0064/">CVE-2011-0064</cve>
	<bugzilla href="https://bugzilla.suse.com/666101">SUSE bug 666101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672502">SUSE bug 672502</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144980" comment="pango-devel-1.36.3-4.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145360" comment="pango-devel-1.40.1-9.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140897" comment="libpango-1_0-0-1.40.1-9.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140898" comment="libpango-1_0-0-32bit-1.40.1-9.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140899" comment="typelib-1_0-Pango-1_0-1.40.1-9.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140897" comment="libpango-1_0-0-1.40.1-9.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140899" comment="typelib-1_0-Pango-1_0-1.40.1-9.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141577" comment="libpango-1_0-0-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141578" comment="libpango-1_0-0-32bit-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141579" comment="pango-modules-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141580" comment="pango-modules-32bit-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141581" comment="typelib-1_0-Pango-1_0-1.36.3-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143242" comment="libpango-1_0-0-1.36.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141578" comment="libpango-1_0-0-32bit-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143243" comment="pango-modules-1.36.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141580" comment="pango-modules-32bit-1.36.3-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143244" comment="typelib-1_0-Pango-1_0-1.36.3-4.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0068</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0068" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0068" ref_url="https://www.suse.com/security/cve/CVE-2011-0068" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-0068/">CVE-2011-0068</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0069</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0069" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0069" ref_url="https://www.suse.com/security/cve/CVE-2011-0069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0070.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0069/">CVE-2011-0069</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0070</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0070" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0070" ref_url="https://www.suse.com/security/cve/CVE-2011-0070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0069.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0070/">CVE-2011-0070</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0079</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0079" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0079" ref_url="https://www.suse.com/security/cve/CVE-2011-0079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x before 4.0.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to gfx/layers/d3d10/ReadbackManagerD3D10.cpp and unknown other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0079/">CVE-2011-0079</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0080</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0080" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0080" ref_url="https://www.suse.com/security/cve/CVE-2011-0080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0080/">CVE-2011-0080</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0081</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0081" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0081" ref_url="https://www.suse.com/security/cve/CVE-2011-0081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1, and Thunderbird 3.1.x before 3.1.10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0081/">CVE-2011-0081</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0084</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0084" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0084" ref_url="https://www.suse.com/security/cve/CVE-2011-0084" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0967-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0958-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0084/">CVE-2011-0084</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0192</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0192" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0192" ref_url="https://www.suse.com/security/cve/CVE-2011-0192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF Internet Fax image file that has been compressed using CCITT Group 4 encoding, related to the EXPAND2D macro in libtiff/tif_fax3.h.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0192/">CVE-2011-0192</cve>
	<bugzilla href="https://bugzilla.suse.com/672510">SUSE bug 672510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/682053">SUSE bug 682053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/682871">SUSE bug 682871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0226</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0226" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0226" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0226" ref_url="https://www.suse.com/security/cve/CVE-2011-0226" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0853-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0852-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0226/">CVE-2011-0226</cve>
	<bugzilla href="https://bugzilla.suse.com/704612">SUSE bug 704612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/728044">SUSE bug 728044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0281</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0281" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0281" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0281" ref_url="https://www.suse.com/security/cve/CVE-2011-0281" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="TID7008008" ref_url="https://www.suse.com/support/kb/doc/?id=7008008" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0111-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00009.html" source="SUSE-SU"/>
    <description>
    The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0281/">CVE-2011-0281</cve>
	<bugzilla href="https://bugzilla.suse.com/663619">SUSE bug 663619</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0282</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0282" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0282" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0282" ref_url="https://www.suse.com/security/cve/CVE-2011-0282" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:004" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="TID7008008" ref_url="https://www.suse.com/support/kb/doc/?id=7008008" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0111-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00009.html" source="SUSE-SU"/>
    <description>
    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer dereference or buffer over-read, and daemon crash) via a crafted principal name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0282/">CVE-2011-0282</cve>
	<bugzilla href="https://bugzilla.suse.com/663619">SUSE bug 663619</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0284</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0284" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0284" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0284" ref_url="https://www.suse.com/security/cve/CVE-2011-0284" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="TID7008166" ref_url="https://www.suse.com/support/kb/doc/?id=7008166" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0284/">CVE-2011-0284</cve>
	<bugzilla href="https://bugzilla.suse.com/671717">SUSE bug 671717</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0285</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0285" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0285" ref_url="https://www.suse.com/security/cve/CVE-2011-0285" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0348-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00047.html" source="SUSE-SU"/>
    <description>
    The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0285/">CVE-2011-0285</cve>
	<bugzilla href="https://bugzilla.suse.com/687469">SUSE bug 687469</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0343</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0343" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0343" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0343" ref_url="https://www.suse.com/security/cve/CVE-2011-0343" source="SUSE CVE"/>
    <description>
    Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0343/">CVE-2011-0343</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147509" comment="syslog-ng-3.4.5-3.5 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0413</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0413" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0413" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0413" ref_url="https://www.suse.com/security/cve/CVE-2011-0413" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:003" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0098-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00002.html" source="SUSE-SU"/>
    <description>
    The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0413/">CVE-2011-0413</cve>
	<bugzilla href="https://bugzilla.suse.com/667655">SUSE bug 667655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680298">SUSE bug 680298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0414</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0414" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0414" ref_url="https://www.suse.com/security/cve/CVE-2011-0414" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0135-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00016.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0414/">CVE-2011-0414</cve>
	<bugzilla href="https://bugzilla.suse.com/674431">SUSE bug 674431</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333968" comment="bind is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333968" comment="bind is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334894" comment="bind-chrootenv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334895" comment="bind-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334896" comment="bind-utils is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334906" comment="libbind9-161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334907" comment="libdns1110 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334908" comment="libirs161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334909" comment="libisc1107 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334913" comment="libisc1107-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334910" comment="libisccc161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334911" comment="libisccfg163 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334912" comment="liblwres161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334904" comment="python-bind is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334906" comment="libbind9-161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334907" comment="libdns1110 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334908" comment="libirs161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334909" comment="libisc1107 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334913" comment="libisc1107-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334910" comment="libisccc161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334911" comment="libisccfg163 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334912" comment="liblwres161 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0419</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0419" ref_url="https://www.suse.com/security/cve/CVE-2011-0419" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0859-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00001.html" source="SUSE-SU"/>
    <description>
    Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0419/">CVE-2011-0419</cve>
	<bugzilla href="https://bugzilla.suse.com/693778">SUSE bug 693778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/700212">SUSE bug 700212</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147561" comment="libapr1-1.5.1-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175410" comment="libapr1-1.5.1-4.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513019" comment="libapr1-1.5.1-4.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144807" comment="libapr1-devel-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009175410" comment="libapr1-1.5.1-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175411" comment="libapr1-devel-1.5.1-4.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513019" comment="libapr1-1.5.1-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514041" comment="libapr1-devel-1.5.1-4.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0420</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0420" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0420" ref_url="https://www.suse.com/security/cve/CVE-2011-0420" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00002.html" source="SUSE-SU"/>
    <description>
    The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0420/">CVE-2011-0420</cve>
	<bugzilla href="https://bugzilla.suse.com/672933">SUSE bug 672933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0421</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0421" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0421" ref_url="https://www.suse.com/security/cve/CVE-2011-0421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0449-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00032.html" source="SUSE-SU"/>
    <description>
    The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0421/">CVE-2011-0421</cve>
	<bugzilla href="https://bugzilla.suse.com/681193">SUSE bug 681193</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141037" comment="libzip2-0.11.1-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141753" comment="libzip2-0.11.1-4.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142037" comment="libzip2-0.11.1-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164531" comment="libzip2-0.11.1-13.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144966" comment="libzip-devel-0.11.1-4.62 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145173" comment="libzip-devel-0.11.1-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145351" comment="libzip-devel-0.11.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145351" comment="libzip-devel-0.11.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009164545" comment="libzip-devel-0.11.1-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009164545" comment="libzip-devel-0.11.1-13.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0460</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0460" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0460" ref_url="https://www.suse.com/security/cve/CVE-2011-0460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0357-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00053.html" source="SUSE-SU"/>
    <description>
    The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0460/">CVE-2011-0460</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140693" comment="kbd-1.15.5-8.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141422" comment="kbd-1.15.5-7.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141890" comment="kbd-1.15.5-8.4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143212" comment="kbd-1.15.5-7.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512194" comment="kbd-2.0.4-8.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512195" comment="kbd-legacy-2.0.4-8.10.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0461</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0461" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0461" ref_url="https://www.suse.com/security/cve/CVE-2011-0461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0171-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00007.html" source="SUSE-SU"/>
    <description>
    /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0461/">CVE-2011-0461</cve>
	<bugzilla href="https://bugzilla.suse.com/665479">SUSE bug 665479</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144707" comment="aaa_base-malloccheck-13.2+git20140911.61c1681-1.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145007" comment="aaa_base-malloccheck-13.2+git20140911.61c1681-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145197" comment="aaa_base-malloccheck-13.2+git20140911.61c1681-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159740" comment="aaa_base-malloccheck-13.2+git20140911.61c1681-36.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513623" comment="aaa_base-malloccheck-13.2+git20140911.61c1681-38.8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513905" comment="aaa_base-malloccheck-13.2+git20140911.61c1681-38.13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140437" comment="aaa_base-13.2+git20140911.61c1681-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140438" comment="aaa_base-extras-13.2+git20140911.61c1681-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141203" comment="aaa_base-13.2+git20140911.61c1681-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141204" comment="aaa_base-extras-13.2+git20140911.61c1681-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141841" comment="aaa_base-13.2+git20140911.61c1681-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141842" comment="aaa_base-extras-13.2+git20140911.61c1681-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143118" comment="aaa_base-13.2+git20140911.61c1681-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143119" comment="aaa_base-extras-13.2+git20140911.61c1681-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158923" comment="aaa_base-13.2+git20140911.61c1681-36.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158924" comment="aaa_base-extras-13.2+git20140911.61c1681-36.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512023" comment="aaa_base-13.2+git20140911.61c1681-38.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512024" comment="aaa_base-extras-13.2+git20140911.61c1681-38.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512680" comment="aaa_base-13.2+git20140911.61c1681-38.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512681" comment="aaa_base-extras-13.2+git20140911.61c1681-38.13.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0463</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0463" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0463" ref_url="https://www.suse.com/security/cve/CVE-2011-0463" source="SUSE CVE"/>
    <description>
    The ocfs2_prepare_page_for_write function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 (OCFS2) subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page boundaries, which allows local users to obtain potentially sensitive information from uninitialized disk locations by reading a file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-09"/>
	<updated date="2023-07-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0463/">CVE-2011-0463</cve>
	<bugzilla href="https://bugzilla.suse.com/670595">SUSE bug 670595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673037">SUSE bug 673037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0465</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0465" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0465" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0465" ref_url="https://www.suse.com/security/cve/CVE-2011-0465" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:016" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0298-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00018.html" source="SUSE-SU"/>
    <description>
    xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0465/">CVE-2011-0465</cve>
	<bugzilla href="https://bugzilla.suse.com/674733">SUSE bug 674733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/688931">SUSE bug 688931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141169" comment="xorg-x11-7.6_1-14.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141170" comment="xorg-x11-essentials-7.6_1-14.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141171" comment="xrdb-1.1.0-3.58 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141169" comment="xorg-x11-7.6_1-14.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141170" comment="xorg-x11-essentials-7.6_1-14.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147615" comment="xrdb-1.1.0-3.57 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141169" comment="xorg-x11-7.6_1-14.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141170" comment="xorg-x11-essentials-7.6_1-14.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513451" comment="xrdb-1.1.0-5.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141834" comment="xorg-x11-7.6_1-14.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141835" comment="xorg-x11-essentials-7.6_1-14.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141171" comment="xrdb-1.1.0-3.58 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0521</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0521" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0521" ref_url="https://www.suse.com/security/cve/CVE-2011-0521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain integer field, which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a negative value.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0521/">CVE-2011-0521</cve>
	<bugzilla href="https://bugzilla.suse.com/666836">SUSE bug 666836</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0523</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0523" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0523" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0523" ref_url="https://www.suse.com/security/cve/CVE-2011-0523" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0884-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html" source="SUSE-SU"/>
    <description>
    gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0523/">CVE-2011-0523</cve>
	<bugzilla href="https://bugzilla.suse.com/666839">SUSE bug 666839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140676" comment="libgypsy0-0.9-6.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145129" comment="libgypsy-devel-0.9-6.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147566" comment="libgypsy0-0.9-6.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145129" comment="libgypsy-devel-0.9-6.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140676" comment="libgypsy0-0.9-6.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0524</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0524" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0524" ref_url="https://www.suse.com/security/cve/CVE-2011-0524" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0884-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0524/">CVE-2011-0524</cve>
	<bugzilla href="https://bugzilla.suse.com/666839">SUSE bug 666839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140676" comment="libgypsy0-0.9-6.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145129" comment="libgypsy-devel-0.9-6.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147566" comment="libgypsy0-0.9-6.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145129" comment="libgypsy-devel-0.9-6.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140676" comment="libgypsy0-0.9-6.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0538</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0538" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0538" ref_url="https://www.suse.com/security/cve/CVE-2011-0538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
    <description>
    Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0538/">CVE-2011-0538</cve>
	<bugzilla href="https://bugzilla.suse.com/669908">SUSE bug 669908</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0541</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0541" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0541" ref_url="https://www.suse.com/security/cve/CVE-2011-0541" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0264-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0265-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00039.html" source="SUSE-SU"/>
    <description>
    fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-18"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-0541/">CVE-2011-0541</cve>
	<bugzilla href="https://bugzilla.suse.com/668820">SUSE bug 668820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/685055">SUSE bug 685055</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110488" comment="fuse-2.9.3-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110491" comment="libfuse2-2.9.3-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110489" comment="fuse-devel-2.9.3-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110490" comment="fuse-devel-static-2.9.3-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110493" comment="libulockmgr1-2.9.3-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141346" comment="fuse-2.9.3-3.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141347" comment="libfuse2-2.9.3-3.65 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144743" comment="fuse-devel-2.9.3-3.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144744" comment="fuse-devel-static-2.9.3-3.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144745" comment="libulockmgr1-2.9.3-3.65 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512133" comment="fuse-2.9.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512134" comment="libfuse2-2.9.3-6.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513658" comment="fuse-devel-2.9.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513659" comment="fuse-devel-static-2.9.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513660" comment="libulockmgr1-2.9.3-6.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0558</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0558" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0558" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0558" ref_url="https://www.suse.com/security/cve/CVE-2011-0558" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0558/">CVE-2011-0558</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0559</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0559" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0559" ref_url="https://www.suse.com/security/cve/CVE-2011-0559" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted parameters to an unspecified ActionScript method that cause a parameter to be used as an object pointer, a different vulnerability than CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0559/">CVE-2011-0559</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0560</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0560" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0560" ref_url="https://www.suse.com/security/cve/CVE-2011-0560" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0560/">CVE-2011-0560</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0561</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0561" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0561" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0561" ref_url="https://www.suse.com/security/cve/CVE-2011-0561" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0561/">CVE-2011-0561</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0571</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0571" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0571" ref_url="https://www.suse.com/security/cve/CVE-2011-0571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0571/">CVE-2011-0571</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0572</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0572" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0572" ref_url="https://www.suse.com/security/cve/CVE-2011-0572" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0572/">CVE-2011-0572</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0573</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0573" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0573" ref_url="https://www.suse.com/security/cve/CVE-2011-0573" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0573/">CVE-2011-0573</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0574</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0574" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0574" ref_url="https://www.suse.com/security/cve/CVE-2011-0574" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0574/">CVE-2011-0574</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0575</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0575" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0575" ref_url="https://www.suse.com/security/cve/CVE-2011-0575" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0575/">CVE-2011-0575</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0577</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0577" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0577" ref_url="https://www.suse.com/security/cve/CVE-2011-0577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code via a crafted font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0577/">CVE-2011-0577</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0578</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0578" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0578" ref_url="https://www.suse.com/security/cve/CVE-2011-0578" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to a constructor for an unspecified ActionScript3 object and improper type checking, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0607, and CVE-2011-0608.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0578/">CVE-2011-0578</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0589</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0589" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0589" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0589" ref_url="https://www.suse.com/security/cve/CVE-2011-0589" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0563 and CVE-2011-0606.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0589/">CVE-2011-0589</cve>
	<bugzilla href="https://bugzilla.suse.com/669550">SUSE bug 669550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0607</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0607" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0607" ref_url="https://www.suse.com/security/cve/CVE-2011-0607" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, and CVE-2011-0608.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0607/">CVE-2011-0607</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0608</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0608" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0608" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0608" ref_url="https://www.suse.com/security/cve/CVE-2011-0608" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:011" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0109-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-02/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0156-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00003.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, and CVE-2011-0607.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0608/">CVE-2011-0608</cve>
	<bugzilla href="https://bugzilla.suse.com/670531">SUSE bug 670531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0609</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0609" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0609" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0609" ref_url="https://www.suse.com/security/cve/CVE-2011-0609" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0215-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00031.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0609/">CVE-2011-0609</cve>
	<bugzilla href="https://bugzilla.suse.com/679672">SUSE bug 679672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/683367">SUSE bug 683367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0611</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0611" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0611" ref_url="https://www.suse.com/security/cve/CVE-2011-0611" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:018" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0373-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00066.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0611/">CVE-2011-0611</cve>
	<bugzilla href="https://bugzilla.suse.com/686818">SUSE bug 686818</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0618</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0618" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0618" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0618" ref_url="https://www.suse.com/security/cve/CVE-2011-0618" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0618/">CVE-2011-0618</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0619</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0619" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0619" ref_url="https://www.suse.com/security/cve/CVE-2011-0619" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0620, CVE-2011-0621, and CVE-2011-0622.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0619/">CVE-2011-0619</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0620</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0620" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0620" ref_url="https://www.suse.com/security/cve/CVE-2011-0620" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0621, and CVE-2011-0622.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0620/">CVE-2011-0620</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0621</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0621" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0621" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0621" ref_url="https://www.suse.com/security/cve/CVE-2011-0621" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0620, and CVE-2011-0622.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0621/">CVE-2011-0621</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0622</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0622" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0622" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0622" ref_url="https://www.suse.com/security/cve/CVE-2011-0622" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0620, and CVE-2011-0621.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0622/">CVE-2011-0622</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0623</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0623" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0623" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0623" ref_url="https://www.suse.com/security/cve/CVE-2011-0623" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0624, CVE-2011-0625, and CVE-2011-0626.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0623/">CVE-2011-0623</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0624</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0624" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0624" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0624" ref_url="https://www.suse.com/security/cve/CVE-2011-0624" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0625, and CVE-2011-0626.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0624/">CVE-2011-0624</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0625</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0625" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0625" ref_url="https://www.suse.com/security/cve/CVE-2011-0625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0626.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0625/">CVE-2011-0625</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0626</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0626" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0626" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0626" ref_url="https://www.suse.com/security/cve/CVE-2011-0626" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0625.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0626/">CVE-2011-0626</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0627</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0627" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0627" ref_url="https://www.suse.com/security/cve/CVE-2011-0627" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:025" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0492-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00031.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0627/">CVE-2011-0627</cve>
	<bugzilla href="https://bugzilla.suse.com/693573">SUSE bug 693573</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0699</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0699" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0699" ref_url="https://www.suse.com/security/cve/CVE-2011-0699" source="SUSE CVE"/>
    <description>
    Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted slot value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-0699/">CVE-2011-0699</cve>
	<bugzilla href="https://bugzilla.suse.com/1167455">SUSE bug 1167455</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0707</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0707" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0707" ref_url="https://www.suse.com/security/cve/CVE-2011-0707" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0312-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0424-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0707/">CVE-2011-0707</cve>
	<bugzilla href="https://bugzilla.suse.com/671745">SUSE bug 671745</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141040" comment="mailman-2.1.17-1.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513323" comment="mailman-2.1.17-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0708</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0708" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0708" ref_url="https://www.suse.com/security/cve/CVE-2011-0708" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:006" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00002.html" source="SUSE-SU"/>
    <description>
    exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0708/">CVE-2011-0708</cve>
	<bugzilla href="https://bugzilla.suse.com/671710">SUSE bug 671710</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0709</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0709" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0709" ref_url="https://www.suse.com/security/cve/CVE-2011-0709" source="SUSE CVE"/>
    <description>
    The br_mdb_ip_get function in net/bridge/br_multicast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an IGMP packet, related to lack of a multicast table.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-0709/">CVE-2011-0709</cve>
	<bugzilla href="https://bugzilla.suse.com/672493">SUSE bug 672493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0710</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0710" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0710" ref_url="https://www.suse.com/security/cve/CVE-2011-0710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0710/">CVE-2011-0710</cve>
	<bugzilla href="https://bugzilla.suse.com/672492">SUSE bug 672492</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0711</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0711" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0711" ref_url="https://www.suse.com/security/cve/CVE-2011-0711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:015" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRY_V1 ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0711/">CVE-2011-0711</cve>
	<bugzilla href="https://bugzilla.suse.com/672505">SUSE bug 672505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/672524">SUSE bug 672524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0712</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0712" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0712" ref_url="https://www.suse.com/security/cve/CVE-2011-0712" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:012" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0712/">CVE-2011-0712</cve>
	<bugzilla href="https://bugzilla.suse.com/672499">SUSE bug 672499</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0713</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0713" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0713" ref_url="https://www.suse.com/security/cve/CVE-2011-0713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long record in a Nokia DCT3 trace file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0713/">CVE-2011-0713</cve>
	<bugzilla href="https://bugzilla.suse.com/672916">SUSE bug 672916</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0715</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0715" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0715" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0715" ref_url="https://www.suse.com/security/cve/CVE-2011-0715" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0238-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00011.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0715/">CVE-2011-0715</cve>
	<bugzilla href="https://bugzilla.suse.com/676949">SUSE bug 676949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0719</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0719" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0719" ref_url="https://www.suse.com/security/cve/CVE-2011-0719" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0403-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00076.html" source="SUSE-SU"/>
    <description>
    Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0719/">CVE-2011-0719</cve>
	<bugzilla href="https://bugzilla.suse.com/670431">SUSE bug 670431</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0726</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0726" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0726" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0726" ref_url="https://www.suse.com/security/cve/CVE-2011-0726" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
    <description>
    The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the start_code and end_code fields in the /proc/#####/stat file for a process executing a PIE binary.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-0726/">CVE-2011-0726</cve>
	<bugzilla href="https://bugzilla.suse.com/701254">SUSE bug 701254</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0904</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0904" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0904" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0904" ref_url="https://www.suse.com/security/cve/CVE-2011-0904" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00027.html" source="SUSE-SU"/>
    <description>
    The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0904/">CVE-2011-0904</cve>
	<bugzilla href="https://bugzilla.suse.com/690238">SUSE bug 690238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/691207">SUSE bug 691207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/691356">SUSE bug 691356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141154" comment="vino-3.20.2-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141155" comment="vino-lang-3.20.2-5.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141821" comment="vino-3.10.1-1.86 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141822" comment="vino-lang-3.10.1-1.86 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0905</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0905" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0905" ref_url="https://www.suse.com/security/cve/CVE-2011-0905" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0481-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00027.html" source="SUSE-SU"/>
    <description>
    The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-0905/">CVE-2011-0905</cve>
	<bugzilla href="https://bugzilla.suse.com/690238">SUSE bug 690238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/691207">SUSE bug 691207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/691356">SUSE bug 691356</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141154" comment="vino-3.20.2-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141155" comment="vino-lang-3.20.2-5.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141821" comment="vino-3.10.1-1.86 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141822" comment="vino-lang-3.10.1-1.86 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0997</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0997" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0997" ref_url="https://www.suse.com/security/cve/CVE-2011-0997" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0320-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0321-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00032.html" source="SUSE-SU"/>
    <description>
    dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0997/">CVE-2011-0997</cve>
	<bugzilla href="https://bugzilla.suse.com/675052">SUSE bug 675052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/689182">SUSE bug 689182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/708527">SUSE bug 708527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/715172">SUSE bug 715172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0999</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-0999" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0999" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-0999" ref_url="https://www.suse.com/security/cve/CVE-2011-0999" source="SUSE CVE"/>
    <description>
    mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge page (THP) during the existence of a temporary stack for an exec system call, which allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0999/">CVE-2011-0999</cve>
	<bugzilla href="https://bugzilla.suse.com/1183531">SUSE bug 1183531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673261">SUSE bug 673261</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1000</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1000" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1000" ref_url="https://www.suse.com/security/cve/CVE-2011-1000" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0303-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00021.html" source="SUSE-SU"/>
    <description>
    jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1000/">CVE-2011-1000</cve>
	<bugzilla href="https://bugzilla.suse.com/673257">SUSE bug 673257</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141814" comment="telepathy-gabble-0.18.1-3.268 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142152" comment="telepathy-gabble-0.18.3-5.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1002</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1002" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1002" ref_url="https://www.suse.com/security/cve/CVE-2011-1002" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
    <description>
    avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1002/">CVE-2011-1002</cve>
	<bugzilla href="https://bugzilla.suse.com/671797">SUSE bug 671797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140467" comment="avahi-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140468" comment="avahi-lang-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140469" comment="avahi-utils-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140470" comment="libavahi-client3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140471" comment="libavahi-client3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140472" comment="libavahi-common3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140473" comment="libavahi-common3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140474" comment="libavahi-core7-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140475" comment="libdns_sd-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140476" comment="libdns_sd-32bit-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140467" comment="avahi-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140468" comment="avahi-lang-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140469" comment="avahi-utils-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140470" comment="libavahi-client3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140472" comment="libavahi-common3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140474" comment="libavahi-core7-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140475" comment="libdns_sd-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140467" comment="avahi-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140468" comment="avahi-lang-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140470" comment="libavahi-client3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140471" comment="libavahi-client3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140472" comment="libavahi-common3-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140473" comment="libavahi-common3-32bit-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140474" comment="libavahi-core7-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140475" comment="libdns_sd-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140476" comment="libdns_sd-32bit-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141212" comment="avahi-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141213" comment="avahi-lang-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141214" comment="libavahi-client3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141215" comment="libavahi-client3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141216" comment="libavahi-common3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141217" comment="libavahi-common3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141218" comment="libavahi-core7-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141219" comment="libdns_sd-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141220" comment="libdns_sd-32bit-0.6.31-20.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141212" comment="avahi-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141213" comment="avahi-lang-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143136" comment="avahi-utils-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141214" comment="libavahi-client3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141215" comment="libavahi-client3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141216" comment="libavahi-common3-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141217" comment="libavahi-common3-32bit-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141218" comment="libavahi-core7-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141219" comment="libdns_sd-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141220" comment="libdns_sd-32bit-0.6.31-20.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144715" comment="avahi-compat-howl-devel-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144716" comment="avahi-compat-mDNSResponder-devel-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144717" comment="libavahi-devel-0.6.31-20.59 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144718" comment="libhowl0-0.6.31-20.59 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145201" comment="avahi-compat-howl-devel-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145202" comment="avahi-compat-mDNSResponder-devel-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145203" comment="libavahi-devel-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145204" comment="libhowl0-0.6.32-30.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145205" comment="python-avahi-0.6.32-30.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512711" comment="avahi-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512712" comment="avahi-lang-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512713" comment="avahi-utils-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512714" comment="libavahi-client3-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512715" comment="libavahi-client3-32bit-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512716" comment="libavahi-common3-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512717" comment="libavahi-common3-32bit-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512718" comment="libavahi-core7-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512719" comment="libdns_sd-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512720" comment="libdns_sd-32bit-0.6.32-32.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513910" comment="avahi-compat-howl-devel-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513911" comment="avahi-compat-mDNSResponder-devel-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513912" comment="libavahi-devel-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513913" comment="libhowl0-0.6.32-32.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513914" comment="python-avahi-0.6.32-32.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1004</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1004" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1004" ref_url="https://www.suse.com/security/cve/CVE-2011-1004" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0561-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00060.html" source="SUSE-SU"/>
    <description>
    The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1004/">CVE-2011-1004</cve>
	<bugzilla href="https://bugzilla.suse.com/673740">SUSE bug 673740</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141123" comment="ruby-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144989" comment="ruby-devel-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147611" comment="ruby-2.1-1.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1005</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1005" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1005" ref_url="https://www.suse.com/security/cve/CVE-2011-1005" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0561-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00060.html" source="SUSE-SU"/>
    <description>
    The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1005/">CVE-2011-1005</cve>
	<bugzilla href="https://bugzilla.suse.com/673750">SUSE bug 673750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/783511">SUSE bug 783511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/783525">SUSE bug 783525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880899">SUSE bug 880899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141123" comment="ruby-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144989" comment="ruby-devel-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147611" comment="ruby-2.1-1.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1006</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1006" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1006" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1006" ref_url="https://www.suse.com/security/cve/CVE-2011-1006" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0316-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1006/">CVE-2011-1006</cve>
	<bugzilla href="https://bugzilla.suse.com/675506">SUSE bug 675506</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140793" comment="libcgroup1-0.41.rc1-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141456" comment="libcgroup1-0.41.rc1-1.30 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144816" comment="libcgroup-devel-0.41.rc1-1.30 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145090" comment="libcgroup-devel-0.41.rc1-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159084" comment="libcgroup1-0.41.rc1-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159802" comment="libcgroup-devel-0.41.rc1-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140792" comment="libcgroup-tools-0.41.rc1-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140793" comment="libcgroup1-0.41.rc1-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143223" comment="libcgroup-tools-0.41.rc1-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141456" comment="libcgroup1-0.41.rc1-1.30 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159083" comment="libcgroup-tools-0.41.rc1-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159084" comment="libcgroup1-0.41.rc1-9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1010</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1010" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1010" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1010" ref_url="https://www.suse.com/security/cve/CVE-2011-1010" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via a malformed Mac OS partition table.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1010/">CVE-2011-1010</cve>
	<bugzilla href="https://bugzilla.suse.com/673929">SUSE bug 673929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1012</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1012" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1012" ref_url="https://www.suse.com/security/cve/CVE-2011-1012" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted partition table.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1012/">CVE-2011-1012</cve>
	<bugzilla href="https://bugzilla.suse.com/674254">SUSE bug 674254</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1013</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1013" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1013" ref_url="https://www.suse.com/security/cve/CVE-2011-1013" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via a crafted num_crtcs (aka vb_num) structure member in an ioctl argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1013/">CVE-2011-1013</cve>
	<bugzilla href="https://bugzilla.suse.com/674691">SUSE bug 674691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1016</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1016" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1016" ref_url="https://www.suse.com/security/cve/CVE-2011-1016" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1016/">CVE-2011-1016</cve>
	<bugzilla href="https://bugzilla.suse.com/674691">SUSE bug 674691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/674693">SUSE bug 674693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1017</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1017" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1017" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1017" ref_url="https://www.suse.com/security/cve/CVE-2011-1017" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1017/">CVE-2011-1017</cve>
	<bugzilla href="https://bugzilla.suse.com/674648">SUSE bug 674648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698221">SUSE bug 698221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1018</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1018" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1018" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1018" ref_url="https://www.suse.com/security/cve/CVE-2011-1018" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:005" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0242-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-03/msg00032.html" source="SUSE-SU"/>
    <description>
    logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-1018/">CVE-2011-1018</cve>
	<bugzilla href="https://bugzilla.suse.com/674984">SUSE bug 674984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141039" comment="logwatch-7.4.3-15.65 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143263" comment="logwatch-7.4.0-13.131 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1019</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1019" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1019" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1019" ref_url="https://www.suse.com/security/cve/CVE-2011-1019" source="SUSE CVE"/>
    <description>
    The dev_load function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAP_SYS_MODULE capability requirement and load arbitrary modules by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1019/">CVE-2011-1019</cve>
	<bugzilla href="https://bugzilla.suse.com/674978">SUSE bug 674978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1020</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1020" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1020" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1020" ref_url="https://www.suse.com/security/cve/CVE-2011-1020" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1020/">CVE-2011-1020</cve>
	<bugzilla href="https://bugzilla.suse.com/674982">SUSE bug 674982</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1021</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1021" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1021" ref_url="https://www.suse.com/security/cve/CVE-2011-1021" source="SUSE CVE"/>
    <description>
    drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custom_method file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1021/">CVE-2011-1021</cve>
	<bugzilla href="https://bugzilla.suse.com/674988">SUSE bug 674988</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1022</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1022" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1022" ref_url="https://www.suse.com/security/cve/CVE-2011-1022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0316-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html" source="SUSE-SU"/>
    <description>
    The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1022/">CVE-2011-1022</cve>
	<bugzilla href="https://bugzilla.suse.com/675048">SUSE bug 675048</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140793" comment="libcgroup1-0.41.rc1-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141456" comment="libcgroup1-0.41.rc1-1.30 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144816" comment="libcgroup-devel-0.41.rc1-1.30 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145090" comment="libcgroup-devel-0.41.rc1-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159084" comment="libcgroup1-0.41.rc1-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159802" comment="libcgroup-devel-0.41.rc1-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140792" comment="libcgroup-tools-0.41.rc1-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140793" comment="libcgroup1-0.41.rc1-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143223" comment="libcgroup-tools-0.41.rc1-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141456" comment="libcgroup1-0.41.rc1-1.30 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159083" comment="libcgroup-tools-0.41.rc1-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159084" comment="libcgroup1-0.41.rc1-9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1023</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1023" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1023" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1023" ref_url="https://www.suse.com/security/cve/CVE-2011-1023" source="SUSE CVE"/>
    <description>
    The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1023/">CVE-2011-1023</cve>
	<bugzilla href="https://bugzilla.suse.com/676707">SUSE bug 676707</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/703752">SUSE bug 703752</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1044</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1044" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1044" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1044" ref_url="https://www.suse.com/security/cve/CVE-2011-1044" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00015.html" source="SUSE-SU"/>
    <description>
    The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1044/">CVE-2011-1044</cve>
	<bugzilla href="https://bugzilla.suse.com/674284">SUSE bug 674284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1076</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1076" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1076" ref_url="https://www.suse.com/security/cve/CVE-2011-1076" source="SUSE CVE"/>
    <description>
    net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereference and OOPS) by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error data within a DNS resolver key.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1076/">CVE-2011-1076</cve>
	<bugzilla href="https://bugzilla.suse.com/702355">SUSE bug 702355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1078</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1078" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1078" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1078" ref_url="https://www.suse.com/security/cve/CVE-2011-1078" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
    <description>
    The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1078/">CVE-2011-1078</cve>
	<bugzilla href="https://bugzilla.suse.com/676601">SUSE bug 676601</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1079</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1079" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1079" ref_url="https://www.suse.com/security/cve/CVE-2011-1079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
    <description>
    The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1079/">CVE-2011-1079</cve>
	<bugzilla href="https://bugzilla.suse.com/1139868">SUSE bug 1139868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/676601">SUSE bug 676601</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1080</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1080" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1080" ref_url="https://www.suse.com/security/cve/CVE-2011-1080" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1080/">CVE-2011-1080</cve>
	<bugzilla href="https://bugzilla.suse.com/676602">SUSE bug 676602</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1082</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1082" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1082" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1082" ref_url="https://www.suse.com/security/cve/CVE-2011-1082" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1082/">CVE-2011-1082</cve>
	<bugzilla href="https://bugzilla.suse.com/676202">SUSE bug 676202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1083</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1083" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1083" ref_url="https://www.suse.com/security/cve/CVE-2011-1083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0540-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1083/">CVE-2011-1083</cve>
	<bugzilla href="https://bugzilla.suse.com/676204">SUSE bug 676204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1090</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1090" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1090" ref_url="https://www.suse.com/security/cve/CVE-2011-1090" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
    <description>
    The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-20"/>
	<updated date="2023-02-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1090/">CVE-2011-1090</cve>
	<bugzilla href="https://bugzilla.suse.com/677286">SUSE bug 677286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1091</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1091" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1091" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1091" ref_url="https://www.suse.com/security/cve/CVE-2011-1091" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0066-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00025.html" source="SUSE-SU"/>
    <description>
    libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1091/">CVE-2011-1091</cve>
	<bugzilla href="https://bugzilla.suse.com/736189">SUSE bug 736189</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1092</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1092" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1092" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1092" ref_url="https://www.suse.com/security/cve/CVE-2011-1092" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0645-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00032.html" source="SUSE-SU"/>
    <description>
    Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1092/">CVE-2011-1092</cve>
	<bugzilla href="https://bugzilla.suse.com/677782">SUSE bug 677782</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1093</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1093" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1093" ref_url="https://www.suse.com/security/cve/CVE-2011-1093" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38 does not properly handle packets for a CLOSED endpoint, which allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending a DCCP-Close packet followed by a DCCP-Reset packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1093/">CVE-2011-1093</cve>
	<bugzilla href="https://bugzilla.suse.com/677676">SUSE bug 677676</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1097</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1097" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1097" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1097" ref_url="https://www.suse.com/security/cve/CVE-2011-1097" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0441-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00007.html" source="SUSE-SU"/>
    <description>
    rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1097/">CVE-2011-1097</cve>
	<bugzilla href="https://bugzilla.suse.com/684387">SUSE bug 684387</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141111" comment="rsync-3.1.0-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141801" comment="rsync-3.1.0-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512616" comment="rsync-3.1.0-13.13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513399" comment="rsync-3.1.3-1.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1098</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1098" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1098" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1098" ref_url="https://www.suse.com/security/cve/CVE-2011-1098" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0536-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00055.html" source="SUSE-SU"/>
    <description>
    Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1098/">CVE-2011-1098</cve>
	<bugzilla href="https://bugzilla.suse.com/1007000">SUSE bug 1007000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136195">SUSE bug 1136195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/677335">SUSE bug 677335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/677336">SUSE bug 677336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141038" comment="logrotate-3.8.7-3.21 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147597" comment="logrotate-3.8.7-3.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159250" comment="logrotate-3.11.0-1.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512572" comment="logrotate-3.11.0-2.11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513322" comment="logrotate-3.11.0-2.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1138</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1138" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1138" ref_url="https://www.suse.com/security/cve/CVE-2011-1138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0347-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00046.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the dissect_6lowpan_iphc function in packet-6lowpan.c in Wireshark 1.4.0 through 1.4.3 on 32-bit platforms allows remote attackers to cause a denial of service (application crash) via a malformed 6LoWPAN IPv6 packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1138/">CVE-2011-1138</cve>
	<bugzilla href="https://bugzilla.suse.com/678567">SUSE bug 678567</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1139</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1139" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1139" ref_url="https://www.suse.com/security/cve/CVE-2011-1139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0347-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00046.html" source="SUSE-SU"/>
    <description>
    wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) via a pcap-ng file that contains a large packet-length field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1139/">CVE-2011-1139</cve>
	<bugzilla href="https://bugzilla.suse.com/678568">SUSE bug 678568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1140</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1140" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1140" ref_url="https://www.suse.com/security/cve/CVE-2011-1140" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0347-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00046.html" source="SUSE-SU"/>
    <description>
    Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1140/">CVE-2011-1140</cve>
	<bugzilla href="https://bugzilla.suse.com/678569">SUSE bug 678569</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1143</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1143" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1143" ref_url="https://www.suse.com/security/cve/CVE-2011-1143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0347-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00046.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1143/">CVE-2011-1143</cve>
	<bugzilla href="https://bugzilla.suse.com/678571">SUSE bug 678571</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1145</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1145" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1145" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1145" ref_url="https://www.suse.com/security/cve/CVE-2011-1145" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0655-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00034.html" source="SUSE-SU"/>
    <description>
    The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-1145/">CVE-2011-1145</cve>
	<bugzilla href="https://bugzilla.suse.com/678796">SUSE bug 678796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/764737">SUSE bug 764737</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141151" comment="unixODBC-2.3.4-6.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144996" comment="unixODBC-devel-2.3.1-4.95 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145369" comment="unixODBC-devel-2.3.4-6.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513886" comment="unixODBC-devel-2.3.6-7.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141151" comment="unixODBC-2.3.4-6.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141152" comment="unixODBC-32bit-2.3.4-6.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141819" comment="unixODBC-2.3.1-4.95 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141820" comment="unixODBC-32bit-2.3.1-4.95 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334325" comment="unixODBC is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337632" comment="unixODBC-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512626" comment="unixODBC-2.3.6-7.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512627" comment="unixODBC-32bit-2.3.6-7.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1146</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1146" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1146" ref_url="https://www.suse.com/security/cve/CVE-2011-1146" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0311-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0578-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0580-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00066.html" source="SUSE-SU"/>
    <description>
    libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3) virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5) virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different vulnerability than CVE-2008-5086.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1146/">CVE-2011-1146</cve>
	<bugzilla href="https://bugzilla.suse.com/678406">SUSE bug 678406</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144947" comment="libvirt-devel-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145170" comment="libvirt-devel-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145337" comment="libvirt-devel-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159830" comment="libvirt-devel-3.3.0-4.28 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513838" comment="libvirt-devel-4.0.0-6.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514203" comment="libvirt-devel-5.1.0-11.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143259" comment="libvirt-lock-sanlock-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143366" comment="libvirt-lock-sanlock-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159245" comment="libvirt-lock-sanlock-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159246" comment="libvirt-nss-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513554" comment="libvirt-daemon-hooks-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513555" comment="libvirt-lock-sanlock-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513556" comment="libvirt-nss-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513265" comment="libvirt-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513266" comment="libvirt-admin-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513267" comment="libvirt-client-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513268" comment="libvirt-daemon-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513269" comment="libvirt-daemon-config-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513270" comment="libvirt-daemon-config-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513271" comment="libvirt-daemon-driver-interface-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513272" comment="libvirt-daemon-driver-libxl-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513273" comment="libvirt-daemon-driver-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513274" comment="libvirt-daemon-driver-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513275" comment="libvirt-daemon-driver-nodedev-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513276" comment="libvirt-daemon-driver-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513277" comment="libvirt-daemon-driver-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513278" comment="libvirt-daemon-driver-secret-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513279" comment="libvirt-daemon-driver-storage-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513280" comment="libvirt-daemon-driver-storage-core-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513281" comment="libvirt-daemon-driver-storage-disk-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513282" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513283" comment="libvirt-daemon-driver-storage-logical-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513284" comment="libvirt-daemon-driver-storage-mpath-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513285" comment="libvirt-daemon-driver-storage-rbd-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513286" comment="libvirt-daemon-driver-storage-scsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513287" comment="libvirt-daemon-hooks-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513288" comment="libvirt-daemon-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513289" comment="libvirt-daemon-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513290" comment="libvirt-daemon-xen-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513291" comment="libvirt-doc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513292" comment="libvirt-libs-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513293" comment="libvirt-lock-sanlock-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513294" comment="libvirt-nss-5.1.0-11.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1153</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1153" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1153" ref_url="https://www.suse.com/security/cve/CVE-2011-1153" source="SUSE CVE"/>
    <description>
    Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1153/">CVE-2011-1153</cve>
	<bugzilla href="https://bugzilla.suse.com/778941">SUSE bug 778941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992991">SUSE bug 992991</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1154</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1154" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1154" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1154" ref_url="https://www.suse.com/security/cve/CVE-2011-1154" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0536-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00055.html" source="SUSE-SU"/>
    <description>
    The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1154/">CVE-2011-1154</cve>
	<bugzilla href="https://bugzilla.suse.com/677335">SUSE bug 677335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679661">SUSE bug 679661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/681984">SUSE bug 681984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141038" comment="logrotate-3.8.7-3.21 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147597" comment="logrotate-3.8.7-3.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159250" comment="logrotate-3.11.0-1.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512572" comment="logrotate-3.11.0-2.11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513322" comment="logrotate-3.11.0-2.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1155</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1155" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1155" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1155" ref_url="https://www.suse.com/security/cve/CVE-2011-1155" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0536-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00055.html" source="SUSE-SU"/>
    <description>
    The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1155/">CVE-2011-1155</cve>
	<bugzilla href="https://bugzilla.suse.com/677335">SUSE bug 677335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/679662">SUSE bug 679662</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141038" comment="logrotate-3.8.7-3.21 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147597" comment="logrotate-3.8.7-3.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159250" comment="logrotate-3.11.0-1.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512572" comment="logrotate-3.11.0-2.11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513322" comment="logrotate-3.11.0-2.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1160</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1160" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1160" ref_url="https://www.suse.com/security/cve/CVE-2011-1160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1160/">CVE-2011-1160</cve>
	<bugzilla href="https://bugzilla.suse.com/680040">SUSE bug 680040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1162</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1162" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1162" ref_url="https://www.suse.com/security/cve/CVE-2011-1162" source="SUSE CVE"/>
    <description>
    The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1162/">CVE-2011-1162</cve>
	<bugzilla href="https://bugzilla.suse.com/680040">SUSE bug 680040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1163</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1163" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1163" ref_url="https://www.suse.com/security/cve/CVE-2011-1163" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1163/">CVE-2011-1163</cve>
	<bugzilla href="https://bugzilla.suse.com/679812">SUSE bug 679812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1164</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1164" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1164" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1164" ref_url="https://www.suse.com/security/cve/CVE-2011-1164" source="SUSE CVE"/>
    <description>
    Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1164/">CVE-2011-1164</cve>
	<bugzilla href="https://bugzilla.suse.com/680072">SUSE bug 680072</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141154" comment="vino-3.20.2-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141155" comment="vino-lang-3.20.2-5.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141821" comment="vino-3.10.1-1.86 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141822" comment="vino-lang-3.10.1-1.86 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1167</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1167" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1167" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1167" ref_url="https://www.suse.com/security/cve/CVE-2011-1167" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0409-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00079.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1167/">CVE-2011-1167</cve>
	<bugzilla href="https://bugzilla.suse.com/683337">SUSE bug 683337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1169</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1169" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1169" ref_url="https://www.suse.com/security/cve/CVE-2011-1169" source="SUSE CVE"/>
    <description>
    Array index error in the asihpi_hpi_ioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service (memory corruption) or possibly gain privileges via a crafted adapter index value that triggers access to an invalid kernel pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1169/">CVE-2011-1169</cve>
	<bugzilla href="https://bugzilla.suse.com/680816">SUSE bug 680816</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1170</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1170" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1170" ref_url="https://www.suse.com/security/cve/CVE-2011-1170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1170/">CVE-2011-1170</cve>
	<bugzilla href="https://bugzilla.suse.com/681180">SUSE bug 681180</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1171</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1171" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1171" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1171" ref_url="https://www.suse.com/security/cve/CVE-2011-1171" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1171/">CVE-2011-1171</cve>
	<bugzilla href="https://bugzilla.suse.com/681181">SUSE bug 681181</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1172</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1172" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1172" ref_url="https://www.suse.com/security/cve/CVE-2011-1172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1172/">CVE-2011-1172</cve>
	<bugzilla href="https://bugzilla.suse.com/681185">SUSE bug 681185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/693976">SUSE bug 693976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1173</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1173" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1173" ref_url="https://www.suse.com/security/cve/CVE-2011-1173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking (AUN) packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1173/">CVE-2011-1173</cve>
	<bugzilla href="https://bugzilla.suse.com/681186">SUSE bug 681186</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1176</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1176" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1176" ref_url="https://www.suse.com/security/cve/CVE-2011-1176" source="SUSE CVE"/>
    <description>
    The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1176/">CVE-2011-1176</cve>
	<bugzilla href="https://bugzilla.suse.com/681176">SUSE bug 681176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1180</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1180" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1180" ref_url="https://www.suse.com/security/cve/CVE-2011-1180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared network and sending a large integer value for a (1) name length or (2) attribute length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1180/">CVE-2011-1180</cve>
	<bugzilla href="https://bugzilla.suse.com/681497">SUSE bug 681497</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1182" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1182" ref_url="https://www.suse.com/security/cve/CVE-2011-1182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1182/">CVE-2011-1182</cve>
	<bugzilla href="https://bugzilla.suse.com/681826">SUSE bug 681826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1187</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1187" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1187" ref_url="https://www.suse.com/security/cve/CVE-2011-1187" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-1187/">CVE-2011-1187</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1202</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1202" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1202" ref_url="https://www.suse.com/security/cve/CVE-2011-1202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:022" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00001.html" source="SUSE-SU"/>
    <description>
    The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1202/">CVE-2011-1202</cve>
	<bugzilla href="https://bugzilla.suse.com/689281">SUSE bug 689281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/692619">SUSE bug 692619</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1410</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1410" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1410" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1410" ref_url="https://www.suse.com/security/cve/CVE-2011-1410" source="SUSE CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2022-11-26"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-1410/">CVE-2011-1410</cve>
	<bugzilla href="https://bugzilla.suse.com/706386">SUSE bug 706386</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655193" comment="openssh-askpass-gnome is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1466</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1466" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1466" ref_url="https://www.suse.com/security/cve/CVE-2011-1466" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1466/">CVE-2011-1466</cve>
	<bugzilla href="https://bugzilla.suse.com/733590">SUSE bug 733590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736169">SUSE bug 736169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/738221">SUSE bug 738221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741520">SUSE bug 741520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741859">SUSE bug 741859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742273">SUSE bug 742273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742806">SUSE bug 742806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743308">SUSE bug 743308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/744966">SUSE bug 744966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746661">SUSE bug 746661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749111">SUSE bug 749111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1476</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1476" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1476" ref_url="https://www.suse.com/security/cve/CVE-2011-1476" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 platforms allows local users to cause a denial of service (memory corruption) by leveraging write access to /dev/sequencer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1476/">CVE-2011-1476</cve>
	<bugzilla href="https://bugzilla.suse.com/681999">SUSE bug 681999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1478</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1478" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1478" ref_url="https://www.suse.com/security/cve/CVE-2011-1478" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1478/">CVE-2011-1478</cve>
	<bugzilla href="https://bugzilla.suse.com/682965">SUSE bug 682965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698450">SUSE bug 698450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1479</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1479" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1479" ref_url="https://www.suse.com/security/cve/CVE-2011-1479" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1479/">CVE-2011-1479</cve>
	<bugzilla href="https://bugzilla.suse.com/655693">SUSE bug 655693</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1485</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1485" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1485" ref_url="https://www.suse.com/security/cve/CVE-2011-1485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:008" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0412-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00080.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0413-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00081.html" source="SUSE-SU"/>
    <description>
    Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1485/">CVE-2011-1485</cve>
	<bugzilla href="https://bugzilla.suse.com/1032717">SUSE bug 1032717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/688788">SUSE bug 688788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115372" comment="libpolkit0-32bit-0.113-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115374" comment="polkit-devel-0.113-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141588" comment="libpolkit0-32bit-0.112-2.189 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142141" comment="libpolkit0-32bit-0.113-5.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144983" comment="polkit-devel-0.112-2.189 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145361" comment="polkit-devel-0.113-5.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512382" comment="libpolkit0-32bit-0.113-5.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513871" comment="polkit-devel-0.113-5.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514240" comment="polkit-devel-0.113-5.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514307" comment="libpolkit0-32bit-0.113-5.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115371" comment="libpolkit0-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115372" comment="libpolkit0-32bit-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115373" comment="polkit-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115376" comment="typelib-1_0-Polkit-1_0-0.113-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115371" comment="libpolkit0-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115373" comment="polkit-0.113-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115376" comment="typelib-1_0-Polkit-1_0-0.113-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140902" comment="libpolkit0-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140903" comment="polkit-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140904" comment="typelib-1_0-Polkit-1_0-0.113-5.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140902" comment="libpolkit0-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142141" comment="libpolkit0-32bit-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140903" comment="polkit-0.113-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140904" comment="typelib-1_0-Polkit-1_0-0.113-5.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141587" comment="libpolkit0-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141588" comment="libpolkit0-32bit-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141589" comment="polkit-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141590" comment="typelib-1_0-Polkit-1_0-0.112-2.189 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141587" comment="libpolkit0-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141589" comment="polkit-0.112-2.189 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141590" comment="typelib-1_0-Polkit-1_0-0.112-2.189 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512381" comment="libpolkit0-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512382" comment="libpolkit0-32bit-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512383" comment="polkit-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512384" comment="typelib-1_0-Polkit-1_0-0.113-5.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512381" comment="libpolkit0-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512383" comment="polkit-0.113-5.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512384" comment="typelib-1_0-Polkit-1_0-0.113-5.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513202" comment="libpolkit0-0.113-5.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513203" comment="polkit-0.113-5.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513204" comment="typelib-1_0-Polkit-1_0-0.113-5.18.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1488</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1488" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1488" ref_url="https://www.suse.com/security/cve/CVE-2011-1488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00033.html" source="SUSE-SU"/>
    <description>
    A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1488/">CVE-2011-1488</cve>
	<bugzilla href="https://bugzilla.suse.com/679030">SUSE bug 679030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/681568">SUSE bug 681568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335176" comment="rsyslog-diag-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335177" comment="rsyslog-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335176" comment="rsyslog-diag-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335177" comment="rsyslog-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338825" comment="rsyslog-module-mmnormalize is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334582" comment="rsyslog is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336376" comment="rsyslog-diag-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336377" comment="rsyslog-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336378" comment="rsyslog-module-gssapi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336379" comment="rsyslog-module-gtls is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694245" comment="rsyslog-module-mmnormalize is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336380" comment="rsyslog-module-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336381" comment="rsyslog-module-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336382" comment="rsyslog-module-relp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336383" comment="rsyslog-module-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336384" comment="rsyslog-module-udpspoof is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1489</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1489" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1489" ref_url="https://www.suse.com/security/cve/CVE-2011-1489" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00033.html" source="SUSE-SU"/>
    <description>
    A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1489/">CVE-2011-1489</cve>
	<bugzilla href="https://bugzilla.suse.com/681568">SUSE bug 681568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335176" comment="rsyslog-diag-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335177" comment="rsyslog-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335176" comment="rsyslog-diag-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335177" comment="rsyslog-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338825" comment="rsyslog-module-mmnormalize is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334582" comment="rsyslog is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336376" comment="rsyslog-diag-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336377" comment="rsyslog-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336378" comment="rsyslog-module-gssapi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336379" comment="rsyslog-module-gtls is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694245" comment="rsyslog-module-mmnormalize is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336380" comment="rsyslog-module-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336381" comment="rsyslog-module-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336382" comment="rsyslog-module-relp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336383" comment="rsyslog-module-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336384" comment="rsyslog-module-udpspoof is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1490</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1490" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1490" ref_url="https://www.suse.com/security/cve/CVE-2011-1490" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:007" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00033.html" source="SUSE-SU"/>
    <description>
    A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1490/">CVE-2011-1490</cve>
	<bugzilla href="https://bugzilla.suse.com/681568">SUSE bug 681568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335176" comment="rsyslog-diag-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335177" comment="rsyslog-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333979" comment="rsyslog is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335176" comment="rsyslog-diag-tools is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335177" comment="rsyslog-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335178" comment="rsyslog-module-gssapi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335179" comment="rsyslog-module-gtls is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338825" comment="rsyslog-module-mmnormalize is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335180" comment="rsyslog-module-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335181" comment="rsyslog-module-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335182" comment="rsyslog-module-relp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335183" comment="rsyslog-module-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335184" comment="rsyslog-module-udpspoof is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334582" comment="rsyslog is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336376" comment="rsyslog-diag-tools is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336377" comment="rsyslog-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336378" comment="rsyslog-module-gssapi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336379" comment="rsyslog-module-gtls is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009694245" comment="rsyslog-module-mmnormalize is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336380" comment="rsyslog-module-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336381" comment="rsyslog-module-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336382" comment="rsyslog-module-relp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336383" comment="rsyslog-module-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336384" comment="rsyslog-module-udpspoof is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1493</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1493" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1493" ref_url="https://www.suse.com/security/cve/CVE-2011-1493" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:017" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:020" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0346-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0399-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1493/">CVE-2011-1493</cve>
	<bugzilla href="https://bugzilla.suse.com/681175">SUSE bug 681175</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1494</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1494" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1494" ref_url="https://www.suse.com/security/cve/CVE-2011-1494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-03-05"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1494/">CVE-2011-1494</cve>
	<bugzilla href="https://bugzilla.suse.com/685402">SUSE bug 685402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1495</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1495" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1495" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1495" ref_url="https://www.suse.com/security/cve/CVE-2011-1495" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
    <description>
    drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-11"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1495/">CVE-2011-1495</cve>
	<bugzilla href="https://bugzilla.suse.com/685402">SUSE bug 685402</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1521</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1521" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1521" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1521" ref_url="https://www.suse.com/security/cve/CVE-2011-1521" source="SUSE CVE"/>
		<reference ref_id="SUSE-SR:2011:009" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SR:2011:010" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0484-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00030.html" source="SUSE-SU"/>
    <description>
    The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1521/">CVE-2011-1521</cve>
	<bugzilla href="https://bugzilla.suse.com/682554">SUSE bug 682554</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131910" comment="python-base-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143249" comment="python-base-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143365" comment="python-base-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159189" comment="python-base-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513548" comment="python-base-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513207" comment="libpython2_7-1_0-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513208" comment="libpython2_7-1_0-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513209" comment="python-base-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513210" comment="python-base-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513212" comment="python-xml-2.7.13-28.31.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1526</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1526" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1526" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1526" ref_url="https://www.suse.com/security/cve/CVE-2011-1526" source="SUSE CVE"/>
		<reference ref_id="TID7008962" ref_url="https://www.suse.com/support/kb/doc/?id=7008962" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html" source="SUSE-SU"/>
    <description>
    ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1526/">CVE-2011-1526</cve>
	<bugzilla href="https://bugzilla.suse.com/698471">SUSE bug 698471</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140711" comment="krb5-appl-clients-1.0.3-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140711" comment="krb5-appl-clients-1.0.3-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140712" comment="krb5-appl-servers-1.0.3-1.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147538" comment="krb5-appl-clients-1.0.3-1.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147539" comment="krb5-appl-servers-1.0.3-1.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1527</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1527" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1527" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1527" ref_url="https://www.suse.com/security/cve/CVE-2011-1527" source="SUSE CVE"/>
    <description>
    The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1527/">CVE-2011-1527</cve>
	<bugzilla href="https://bugzilla.suse.com/719393">SUSE bug 719393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743742">SUSE bug 743742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1528</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1528" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1528" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1528" ref_url="https://www.suse.com/security/cve/CVE-2011-1528" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html" source="SUSE-SU"/>
    <description>
    The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, related to the locked_check_p function.  NOTE: the Berkeley DB vector is covered by CVE-2011-4151.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1528/">CVE-2011-1528</cve>
	<bugzilla href="https://bugzilla.suse.com/719393">SUSE bug 719393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743742">SUSE bug 743742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1529</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1529" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1529" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1529" ref_url="https://www.suse.com/security/cve/CVE-2011-1529" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1169-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html" source="SUSE-SU"/>
    <description>
    The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1529/">CVE-2011-1529</cve>
	<bugzilla href="https://bugzilla.suse.com/719393">SUSE bug 719393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743742">SUSE bug 743742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1530</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1530" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1530" ref_url="https://www.suse.com/security/cve/CVE-2011-1530" source="SUSE CVE"/>
    <description>
    The process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS request that triggers an error other than the KRB5_KDB_NOENTRY error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1530/">CVE-2011-1530</cve>
	<bugzilla href="https://bugzilla.suse.com/730393">SUSE bug 730393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1573</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1573" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1573" ref_url="https://www.suse.com/security/cve/CVE-2011-1573" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:019" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1573/">CVE-2011-1573</cve>
	<bugzilla href="https://bugzilla.suse.com/686813">SUSE bug 686813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1576</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1576" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1576" ref_url="https://www.suse.com/security/cve/CVE-2011-1576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
    <description>
    The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1576/">CVE-2011-1576</cve>
	<bugzilla href="https://bugzilla.suse.com/698450">SUSE bug 698450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1577</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1577" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1577" ref_url="https://www.suse.com/security/cve/CVE-2011-1577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1577/">CVE-2011-1577</cve>
	<bugzilla href="https://bugzilla.suse.com/687113">SUSE bug 687113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/692784">SUSE bug 692784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1581</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1581" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1581" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1581" ref_url="https://www.suse.com/security/cve/CVE-2011-1581" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:021" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-04/msg00083.html" source="SUSE-SU"/>
    <description>
    The bond_select_queue function in drivers/net/bonding/bond_main.c in the Linux kernel before 2.6.39, when a network device with a large number of receive queues is installed but the default tx_queues setting is used, does not properly restrict queue indexes, which allows remote attackers to cause a denial of service (BUG and system crash) or possibly have unspecified other impact by sending network traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1581/">CVE-2011-1581</cve>
	<bugzilla href="https://bugzilla.suse.com/687116">SUSE bug 687116</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1585</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1585" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1585" ref_url="https://www.suse.com/security/cve/CVE-2011-1585" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:026" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1585/">CVE-2011-1585</cve>
	<bugzilla href="https://bugzilla.suse.com/687812">SUSE bug 687812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1590</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1590" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1590" ref_url="https://www.suse.com/security/cve/CVE-2011-1590" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1590/">CVE-2011-1590</cve>
	<bugzilla href="https://bugzilla.suse.com/688109">SUSE bug 688109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1591</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1591" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1591" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1591" ref_url="https://www.suse.com/security/cve/CVE-2011-1591" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00013.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-1591/">CVE-2011-1591</cve>
	<bugzilla href="https://bugzilla.suse.com/688109">SUSE bug 688109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1592</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1592" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1592" ref_url="https://www.suse.com/security/cve/CVE-2011-1592" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0599-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0602-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses an incorrect integer data type during decoding of SETCLIENTID calls, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1592/">CVE-2011-1592</cve>
	<bugzilla href="https://bugzilla.suse.com/688109">SUSE bug 688109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1593</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1593" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1593" ref_url="https://www.suse.com/security/cve/CVE-2011-1593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:027" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0711-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-16"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1593/">CVE-2011-1593</cve>
	<bugzilla href="https://bugzilla.suse.com/688432">SUSE bug 688432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/690537">SUSE bug 690537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1598</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1598" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1598" ref_url="https://www.suse.com/security/cve/CVE-2011-1598" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
    <description>
    The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1598/">CVE-2011-1598</cve>
	<bugzilla href="https://bugzilla.suse.com/688685">SUSE bug 688685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/689038">SUSE bug 689038</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1709</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1709" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1709" ref_url="https://www.suse.com/security/cve/CVE-2011-1709" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0581-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00000.html" source="SUSE-SU"/>
    <description>
    GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1709/">CVE-2011-1709</cve>
	<bugzilla href="https://bugzilla.suse.com/694858">SUSE bug 694858</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144762" comment="gdm-devel-3.10.0.1-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145024" comment="gdm-devel-3.10.0.1-23.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145238" comment="gdm-devel-3.10.0.1-52.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513674" comment="gdm-devel-3.10.0.1-54.6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140601" comment="gdm-3.10.0.1-52.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140602" comment="gdm-lang-3.10.0.1-52.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140603" comment="gdmflexiserver-3.10.0.1-52.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140604" comment="libgdm1-3.10.0.1-52.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140605" comment="typelib-1_0-Gdm-1_0-3.10.0.1-52.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141362" comment="gdm-3.10.0.1-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141363" comment="gdm-branding-upstream-3.10.0.1-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141364" comment="gdm-lang-3.10.0.1-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141365" comment="gdmflexiserver-3.10.0.1-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141366" comment="libgdm1-3.10.0.1-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141367" comment="typelib-1_0-Gdm-1_0-3.10.0.1-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141862" comment="gdm-3.10.0.1-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141863" comment="gdm-branding-upstream-3.10.0.1-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141864" comment="gdm-lang-3.10.0.1-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141865" comment="gdmflexiserver-3.10.0.1-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141866" comment="libgdm1-3.10.0.1-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141867" comment="typelib-1_0-Gdm-1_0-3.10.0.1-23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512145" comment="gdm-3.10.0.1-54.6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512146" comment="gdm-lang-3.10.0.1-54.6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512147" comment="gdmflexiserver-3.10.0.1-54.6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512148" comment="libgdm1-3.10.0.1-54.6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512149" comment="typelib-1_0-Gdm-1_0-3.10.0.1-54.6.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1745</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1745" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1745" ref_url="https://www.suse.com/security/cve/CVE-2011-1745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-19"/>
	<updated date="2023-02-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1745/">CVE-2011-1745</cve>
	<bugzilla href="https://bugzilla.suse.com/689797">SUSE bug 689797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/693043">SUSE bug 693043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1747</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1747" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1747" ref_url="https://www.suse.com/security/cve/CVE-2011-1747" source="SUSE CVE"/>
    <description>
    The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2) AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of service (memory consumption) by making many calls to these ioctls.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-03-03"/>
	<updated date="2023-03-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1747/">CVE-2011-1747</cve>
	<bugzilla href="https://bugzilla.suse.com/689797">SUSE bug 689797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1752</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1752" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1752" ref_url="https://www.suse.com/security/cve/CVE-2011-1752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00012.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1752/">CVE-2011-1752</cve>
	<bugzilla href="https://bugzilla.suse.com/698205">SUSE bug 698205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1758</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1758" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1758" ref_url="https://www.suse.com/security/cve/CVE-2011-1758" source="SUSE CVE"/>
    <description>
    The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1758/">CVE-2011-1758</cve>
	<bugzilla href="https://bugzilla.suse.com/691135">SUSE bug 691135</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140853" comment="sssd-32bit-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141537" comment="libipa_hbac0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141538" comment="libsss_idmap0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141539" comment="python-sssd-config-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141540" comment="sssd-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141541" comment="sssd-32bit-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141542" comment="sssd-ad-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141543" comment="sssd-ipa-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141544" comment="sssd-krb5-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141545" comment="sssd-krb5-common-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141546" comment="sssd-ldap-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141547" comment="sssd-proxy-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141548" comment="sssd-tools-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141980" comment="libipa_hbac0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141981" comment="libsss_idmap0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141982" comment="libsss_sudo-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141983" comment="python-sssd-config-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141984" comment="sssd-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141985" comment="sssd-32bit-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141986" comment="sssd-ad-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141987" comment="sssd-ipa-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141988" comment="sssd-krb5-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141989" comment="sssd-krb5-common-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141990" comment="sssd-ldap-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141991" comment="sssd-proxy-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141992" comment="sssd-tools-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144872" comment="libipa_hbac-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144873" comment="libsss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144874" comment="libsss_nss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144875" comment="libsss_nss_idmap0-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145130" comment="libipa_hbac-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145131" comment="libsss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145132" comment="libsss_nss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145133" comment="libsss_nss_idmap0-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145298" comment="libipa_hbac-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145299" comment="libsss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145300" comment="libsss_nss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145301" comment="libsss_nss_idmap0-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159140" comment="libipa_hbac0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159141" comment="libsss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159142" comment="libsss_nss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159143" comment="libsss_sudo-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159144" comment="python-sssd-config-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159145" comment="sssd-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159146" comment="sssd-32bit-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159147" comment="sssd-ad-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159148" comment="sssd-ipa-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159149" comment="sssd-krb5-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159150" comment="sssd-krb5-common-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159151" comment="sssd-ldap-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159152" comment="sssd-proxy-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159153" comment="sssd-tools-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159812" comment="libipa_hbac-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159813" comment="libsss_idmap-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159814" comment="libsss_nss_idmap-devel-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512322" comment="libipa_hbac0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512323" comment="libsss_certmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512324" comment="libsss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512325" comment="libsss_nss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512326" comment="libsss_simpleifp0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166514" comment="libsss_sudo-1.13.4-34.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512327" comment="python-sssd-config-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512328" comment="sssd-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512329" comment="sssd-32bit-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512330" comment="sssd-ad-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512331" comment="sssd-ipa-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512332" comment="sssd-krb5-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512333" comment="sssd-krb5-common-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512334" comment="sssd-ldap-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512335" comment="sssd-proxy-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512336" comment="sssd-tools-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513122" comment="libipa_hbac0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513123" comment="libsss_certmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513124" comment="libsss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513125" comment="libsss_nss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513126" comment="libsss_simpleifp0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513127" comment="python-sssd-config-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513128" comment="sssd-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513129" comment="sssd-32bit-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513130" comment="sssd-ad-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513131" comment="sssd-ipa-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513132" comment="sssd-krb5-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513133" comment="sssd-krb5-common-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513134" comment="sssd-ldap-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513135" comment="sssd-proxy-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513136" comment="sssd-tools-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513732" comment="libipa_hbac-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513733" comment="libsss_idmap-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513734" comment="libsss_nss_idmap-devel-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514066" comment="libipa_hbac-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514067" comment="libsss_idmap-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514068" comment="libsss_nss_idmap-devel-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1761</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1761" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1761" ref_url="https://www.suse.com/security/cve/CVE-2011-1761" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0551-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-05/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0943-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1761/">CVE-2011-1761</cve>
	<bugzilla href="https://bugzilla.suse.com/691137">SUSE bug 691137</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/710726">SUSE bug 710726</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140885" comment="libmodplug1-0.8.8.4-13.69 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144885" comment="libmodplug-devel-0.8.8.4-13.69 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147571" comment="libmodplug1-0.8.8.4-13.63 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177725" comment="libmodplug1-0.8.9.0+git20170610.f6dd59a-15.4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177726" comment="libmodplug-devel-0.8.9.0+git20170610.f6dd59a-15.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1767" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1767" ref_url="https://www.suse.com/security/cve/CVE-2011-1767" source="SUSE CVE"/>
    <description>
    net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip_gre is configured as a module, allows remote attackers to cause a denial of service (OOPS) by sending a packet during module loading.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1767/">CVE-2011-1767</cve>
	<bugzilla href="https://bugzilla.suse.com/692239">SUSE bug 692239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1770</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1770" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1770" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1770" ref_url="https://www.suse.com/security/cve/CVE-2011-1770" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-08"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1770/">CVE-2011-1770</cve>
	<bugzilla href="https://bugzilla.suse.com/692498">SUSE bug 692498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1771</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1771" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1771" ref_url="https://www.suse.com/security/cve/CVE-2011-1771" source="SUSE CVE"/>
    <description>
    The cifs_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact by setting the O_DIRECT flag during an attempt to open a file on a CIFS filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-1771/">CVE-2011-1771</cve>
	<bugzilla href="https://bugzilla.suse.com/692497">SUSE bug 692497</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1776</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1776" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1776" ref_url="https://www.suse.com/security/cve/CVE-2011-1776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-1776/">CVE-2011-1776</cve>
	<bugzilla href="https://bugzilla.suse.com/692784">SUSE bug 692784</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1783</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1783" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1783" ref_url="https://www.suse.com/security/cve/CVE-2011-1783" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0692-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00012.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1783/">CVE-2011-1783</cve>
	<bugzilla href="https://bugzilla.suse.com/698205">SUSE bug 698205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1830</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1830" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1830" ref_url="https://www.suse.com/security/cve/CVE-2011-1830" source="SUSE CVE"/>
    <description>
    Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2011-1830/">CVE-2011-1830</cve>
	<bugzilla href="https://bugzilla.suse.com/1134166">SUSE bug 1134166</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338710" comment="ekiga is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009625083" comment="ekiga-lang is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1831</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1831" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1831" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1831" ref_url="https://www.suse.com/security/cve/CVE-2011-1831" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1831/">CVE-2011-1831</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121567" comment="ecryptfs-utils-32bit-103-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141302" comment="ecryptfs-utils-103-5.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143163" comment="ecryptfs-utils-103-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1832</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1832" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1832" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1832" ref_url="https://www.suse.com/security/cve/CVE-2011-1832" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1832/">CVE-2011-1832</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121567" comment="ecryptfs-utils-32bit-103-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141302" comment="ecryptfs-utils-103-5.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143163" comment="ecryptfs-utils-103-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1833</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1833" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1833" ref_url="https://www.suse.com/security/cve/CVE-2011-1833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1833/">CVE-2011-1833</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121567" comment="ecryptfs-utils-32bit-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121567" comment="ecryptfs-utils-32bit-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121567" comment="ecryptfs-utils-32bit-103-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141302" comment="ecryptfs-utils-103-5.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143163" comment="ecryptfs-utils-103-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1834</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1834" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1834" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1834" ref_url="https://www.suse.com/security/cve/CVE-2011-1834" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1834/">CVE-2011-1834</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121567" comment="ecryptfs-utils-32bit-103-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141302" comment="ecryptfs-utils-103-5.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143163" comment="ecryptfs-utils-103-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1835</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1835" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1835" ref_url="https://www.suse.com/security/cve/CVE-2011-1835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1835/">CVE-2011-1835</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121567" comment="ecryptfs-utils-32bit-103-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141302" comment="ecryptfs-utils-103-5.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143163" comment="ecryptfs-utils-103-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1836</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1836" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1836" ref_url="https://www.suse.com/security/cve/CVE-2011-1836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1836/">CVE-2011-1836</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121567" comment="ecryptfs-utils-32bit-103-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141302" comment="ecryptfs-utils-103-5.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143163" comment="ecryptfs-utils-103-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1837</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1837" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1837" ref_url="https://www.suse.com/security/cve/CVE-2011-1837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0898-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html" source="SUSE-SU"/>
    <description>
    The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1837/">CVE-2011-1837</cve>
	<bugzilla href="https://bugzilla.suse.com/709771">SUSE bug 709771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711539">SUSE bug 711539</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009121566" comment="ecryptfs-utils-103-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009121567" comment="ecryptfs-utils-32bit-103-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141302" comment="ecryptfs-utils-103-5.35 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143163" comment="ecryptfs-utils-103-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141303" comment="ecryptfs-utils-32bit-103-5.35 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170839" comment="ecryptfs-utils-103-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170840" comment="ecryptfs-utils-32bit-103-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1898</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1898" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1898" ref_url="https://www.suse.com/security/cve/CVE-2011-1898" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0942-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0941-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00017.html" source="SUSE-SU"/>
    <description>
    Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1898/">CVE-2011-1898</cve>
	<bugzilla href="https://bugzilla.suse.com/702025">SUSE bug 702025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/724906">SUSE bug 724906</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1907</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1907" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1907" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1907" ref_url="https://www.suse.com/security/cve/CVE-2011-1907" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0666-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00077.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1907/">CVE-2011-1907</cve>
	<bugzilla href="https://bugzilla.suse.com/692210">SUSE bug 692210</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1910</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1910" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1910" ref_url="https://www.suse.com/security/cve/CVE-2011-1910" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0603-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00014.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1910/">CVE-2011-1910</cve>
	<bugzilla href="https://bugzilla.suse.com/696585">SUSE bug 696585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698286">SUSE bug 698286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111921" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1921</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1921" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1921" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1921" ref_url="https://www.suse.com/security/cve/CVE-2011-1921" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00012.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1921/">CVE-2011-1921</cve>
	<bugzilla href="https://bugzilla.suse.com/698205">SUSE bug 698205</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1927</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1927" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1927" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1927" ref_url="https://www.suse.com/security/cve/CVE-2011-1927" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
    <description>
    The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME_EXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service (invalid pointer dereference) via crafted fragmented packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1927/">CVE-2011-1927</cve>
	<bugzilla href="https://bugzilla.suse.com/694498">SUSE bug 694498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1928</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1928" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1928" ref_url="https://www.suse.com/security/cve/CVE-2011-1928" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0859-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00001.html" source="SUSE-SU"/>
    <description>
    The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used. NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1928/">CVE-2011-1928</cve>
	<bugzilla href="https://bugzilla.suse.com/693778">SUSE bug 693778</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147561" comment="libapr1-1.5.1-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175410" comment="libapr1-1.5.1-4.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513019" comment="libapr1-1.5.1-4.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140778" comment="libapr1-1.5.1-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144807" comment="libapr1-devel-1.5.1-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009175410" comment="libapr1-1.5.1-4.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175411" comment="libapr1-devel-1.5.1-4.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513019" comment="libapr1-1.5.1-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514041" comment="libapr1-devel-1.5.1-4.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1944</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1944" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1944" ref_url="https://www.suse.com/security/cve/CVE-2011-1944" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0839-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00035.html" source="SUSE-SU"/>
    <description>
    Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-1944/">CVE-2011-1944</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/697372">SUSE bug 697372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103734" comment="libxml2-devel-2.9.1-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144964" comment="libxml2-devel-2.9.1-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145350" comment="libxml2-devel-2.9.4-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157778" comment="libxml2-devel-2.9.4-45.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513851" comment="libxml2-devel-2.9.4-46.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514210" comment="libxml2-devel-2.9.4-46.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103736" comment="libxml2-doc-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143262" comment="libxml2-doc-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157775" comment="libxml2-doc-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513557" comment="libxml2-doc-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513309" comment="libxml2-2-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513310" comment="libxml2-2-32bit-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513311" comment="libxml2-doc-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513312" comment="libxml2-tools-2.9.4-46.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1946</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1946" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1946" ref_url="https://www.suse.com/security/cve/CVE-2011-1946" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0694-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00041.html" source="SUSE-SU"/>
    <description>
    gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid function, which allows local users to gain privileges by leveraging access to two unprivileged user accounts, and running many processes under one of these accounts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1946/">CVE-2011-1946</cve>
	<bugzilla href="https://bugzilla.suse.com/695627">SUSE bug 695627</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144858" comment="libgnomesu-devel-1.0.0-352.84 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145294" comment="libgnomesu-devel-2.0.0-353.6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140842" comment="libgnomesu-2.0.0-353.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140843" comment="libgnomesu-lang-2.0.0-353.6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140844" comment="libgnomesu0-2.0.0-353.6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141524" comment="libgnomesu-1.0.0-352.84 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141525" comment="libgnomesu-lang-1.0.0-352.84 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141526" comment="libgnomesu0-1.0.0-352.84 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1947</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1947" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1947" ref_url="https://www.suse.com/security/cve/CVE-2011-1947" source="SUSE CVE"/>
    <description>
    fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1947/">CVE-2011-1947</cve>
	<bugzilla href="https://bugzilla.suse.com/697368">SUSE bug 697368</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140570" comment="fetchmailconf-6.3.26-12.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150270" comment="fetchmailconf-6.3.26-5.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143172" comment="fetchmail-6.3.26-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143173" comment="fetchmailconf-6.3.26-5.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1951</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1951" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1951" ref_url="https://www.suse.com/security/cve/CVE-2011-1951" source="SUSE CVE"/>
    <description>
    lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1951/">CVE-2011-1951</cve>
	<bugzilla href="https://bugzilla.suse.com/697374">SUSE bug 697374</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147509" comment="syslog-ng-3.4.5-3.5 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1957</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1957" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1957" ref_url="https://www.suse.com/security/cve/CVE-2011-1957" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
    <description>
    The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1957/">CVE-2011-1957</cve>
	<bugzilla href="https://bugzilla.suse.com/697516">SUSE bug 697516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1958</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1958" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1958" ref_url="https://www.suse.com/security/cve/CVE-2011-1958" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1958/">CVE-2011-1958</cve>
	<bugzilla href="https://bugzilla.suse.com/697516">SUSE bug 697516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1959</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-1959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1959" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-1959" ref_url="https://www.suse.com/security/cve/CVE-2011-1959" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
    <description>
    The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1959/">CVE-2011-1959</cve>
	<bugzilla href="https://bugzilla.suse.com/697516">SUSE bug 697516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2022</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2022" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2022" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2022" ref_url="https://www.suse.com/security/cve/CVE-2011-2022" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
    <description>
    The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-12-09"/>
	<updated date="2022-12-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2022/">CVE-2011-2022</cve>
	<bugzilla href="https://bugzilla.suse.com/689797">SUSE bug 689797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/693043">SUSE bug 693043</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2054</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2054" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2054" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2054" ref_url="https://www.suse.com/security/cve/CVE-2011-2054" source="SUSE CVE"/>
    <description>
    A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker must have the correct primary credentials in order to successfully exploit this vulnerability.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2054/">CVE-2011-2054</cve>
	<bugzilla href="https://bugzilla.suse.com/709167">SUSE bug 709167</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144932" comment="libsoup-devel-2.44.2-1.46 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145321" comment="libsoup-devel-2.54.1-4.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513828" comment="libsoup-devel-2.62.2-5.7.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140939" comment="libsoup-2_4-1-2.54.1-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140940" comment="libsoup-2_4-1-32bit-2.54.1-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140941" comment="libsoup-lang-2.54.1-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140942" comment="typelib-1_0-Soup-2_4-2.54.1-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140939" comment="libsoup-2_4-1-2.54.1-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140941" comment="libsoup-lang-2.54.1-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140942" comment="typelib-1_0-Soup-2_4-2.54.1-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141687" comment="libsoup-2_4-1-2.44.2-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141688" comment="libsoup-2_4-1-32bit-2.44.2-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141689" comment="libsoup-lang-2.44.2-1.46 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141690" comment="typelib-1_0-Soup-2_4-2.44.2-1.46 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512472" comment="libsoup-2_4-1-2.62.2-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512473" comment="libsoup-2_4-1-32bit-2.62.2-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512474" comment="libsoup-lang-2.62.2-5.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512475" comment="typelib-1_0-Soup-2_4-2.62.2-5.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2107</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2107" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2107" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2107" ref_url="https://www.suse.com/security/cve/CVE-2011-2107" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0614-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0612-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00017.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2107/">CVE-2011-2107</cve>
	<bugzilla href="https://bugzilla.suse.com/698261">SUSE bug 698261</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698296">SUSE bug 698296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698358">SUSE bug 698358</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2110</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2110" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2110" ref_url="https://www.suse.com/security/cve/CVE-2011-2110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00004.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2110/">CVE-2011-2110</cve>
	<bugzilla href="https://bugzilla.suse.com/699942">SUSE bug 699942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2130</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2130" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2130" ref_url="https://www.suse.com/security/cve/CVE-2011-2130" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2130/">CVE-2011-2130</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2134</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2134" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2134" ref_url="https://www.suse.com/security/cve/CVE-2011-2134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2134/">CVE-2011-2134</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2135</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2135" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2135" ref_url="https://www.suse.com/security/cve/CVE-2011-2135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2140, CVE-2011-2417, and CVE-2011-2425.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2135/">CVE-2011-2135</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2136</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2136" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2136" ref_url="https://www.suse.com/security/cve/CVE-2011-2136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2138 and CVE-2011-2416.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2136/">CVE-2011-2136</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2137</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2137" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2137" ref_url="https://www.suse.com/security/cve/CVE-2011-2137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2414, and CVE-2011-2415.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2137/">CVE-2011-2137</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2138</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2138" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2138" ref_url="https://www.suse.com/security/cve/CVE-2011-2138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2416.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2138/">CVE-2011-2138</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2139</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2139" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2139" ref_url="https://www.suse.com/security/cve/CVE-2011-2139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2139/">CVE-2011-2139</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2140</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2140" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2140" ref_url="https://www.suse.com/security/cve/CVE-2011-2140" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2140/">CVE-2011-2140</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2174</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2174" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2174" ref_url="https://www.suse.com/security/cve/CVE-2011-2174" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2174/">CVE-2011-2174</cve>
	<bugzilla href="https://bugzilla.suse.com/697516">SUSE bug 697516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2175</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2175" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2175" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2175" ref_url="https://www.suse.com/security/cve/CVE-2011-2175" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a malformed Visual Networks file that triggers a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2175/">CVE-2011-2175</cve>
	<bugzilla href="https://bugzilla.suse.com/697516">SUSE bug 697516</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2178</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2178" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2178" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2178" ref_url="https://www.suse.com/security/cve/CVE-2011-2178" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0643-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00030.html" source="SUSE-SU"/>
    <description>
    The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary files on the host OS. NOTE: this vulnerability exists because of a CVE-2010-2238 regression.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2178/">CVE-2011-2178</cve>
	<bugzilla href="https://bugzilla.suse.com/697904">SUSE bug 697904</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334931" comment="libvirt-client-32bit is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334950" comment="libvirt-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335514" comment="libvirt-nss is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336190" comment="libvirt-admin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336191" comment="libvirt-daemon-driver-storage-core is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336192" comment="libvirt-daemon-driver-storage-disk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336193" comment="libvirt-daemon-driver-storage-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336194" comment="libvirt-daemon-driver-storage-logical is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336195" comment="libvirt-daemon-driver-storage-mpath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336196" comment="libvirt-daemon-driver-storage-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336197" comment="libvirt-daemon-driver-storage-scsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336198" comment="libvirt-libs is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333954" comment="libvirt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336190" comment="libvirt-admin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334932" comment="libvirt-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334933" comment="libvirt-daemon is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334934" comment="libvirt-daemon-config-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334935" comment="libvirt-daemon-config-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334936" comment="libvirt-daemon-driver-interface is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334937" comment="libvirt-daemon-driver-libxl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334938" comment="libvirt-daemon-driver-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334939" comment="libvirt-daemon-driver-network is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334940" comment="libvirt-daemon-driver-nodedev is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334941" comment="libvirt-daemon-driver-nwfilter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334942" comment="libvirt-daemon-driver-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334943" comment="libvirt-daemon-driver-secret is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334944" comment="libvirt-daemon-driver-storage is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336191" comment="libvirt-daemon-driver-storage-core is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336192" comment="libvirt-daemon-driver-storage-disk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336193" comment="libvirt-daemon-driver-storage-iscsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336194" comment="libvirt-daemon-driver-storage-logical is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336195" comment="libvirt-daemon-driver-storage-mpath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336196" comment="libvirt-daemon-driver-storage-rbd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336197" comment="libvirt-daemon-driver-storage-scsi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335515" comment="libvirt-daemon-hooks is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334945" comment="libvirt-daemon-lxc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334946" comment="libvirt-daemon-qemu is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334947" comment="libvirt-daemon-xen is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334948" comment="libvirt-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336198" comment="libvirt-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334949" comment="libvirt-lock-sanlock is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335514" comment="libvirt-nss is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2182" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2182" ref_url="https://www.suse.com/security/cve/CVE-2011-2182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2182/">CVE-2011-2182</cve>
	<bugzilla href="https://bugzilla.suse.com/674648">SUSE bug 674648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698221">SUSE bug 698221</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2184</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2184" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2184" ref_url="https://www.suse.com/security/cve/CVE-2011-2184" source="SUSE CVE"/>
    <description>
    The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2184/">CVE-2011-2184</cve>
	<bugzilla href="https://bugzilla.suse.com/697899">SUSE bug 697899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2186</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2186" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2186" ref_url="https://www.suse.com/security/cve/CVE-2011-2186" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0705-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-06/msg00043.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2186/">CVE-2011-2186</cve>
	<bugzilla href="https://bugzilla.suse.com/698456">SUSE bug 698456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124820" comment="git-core-1.8.5.6-18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143185" comment="git-core-1.8.5.2-2.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149936" comment="git-core-1.8.5.6-11.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155663" comment="git-core-2.12.3-26.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178222" comment="git-core-2.12.3-27.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512864" comment="git-core-2.12.3-27.17.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009124818" comment="git-1.8.5.6-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124819" comment="git-arch-1.8.5.6-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124820" comment="git-core-1.8.5.6-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124821" comment="git-cvs-1.8.5.6-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124822" comment="git-daemon-1.8.5.6-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124823" comment="git-email-1.8.5.6-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124824" comment="git-gui-1.8.5.6-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124825" comment="git-svn-1.8.5.6-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124826" comment="git-web-1.8.5.6-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009124827" comment="gitk-1.8.5.6-18.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144764" comment="git-1.8.5.2-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144765" comment="git-arch-1.8.5.2-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144766" comment="git-core-1.8.5.2-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144767" comment="git-cvs-1.8.5.2-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144768" comment="git-daemon-1.8.5.2-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144769" comment="git-email-1.8.5.2-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144770" comment="git-gui-1.8.5.2-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144771" comment="git-svn-1.8.5.2-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144772" comment="git-web-1.8.5.2-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144773" comment="gitk-1.8.5.2-2.32 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149934" comment="git-1.8.5.6-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149935" comment="git-arch-1.8.5.6-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149936" comment="git-core-1.8.5.6-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149937" comment="git-cvs-1.8.5.6-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149938" comment="git-daemon-1.8.5.6-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149939" comment="git-email-1.8.5.6-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149940" comment="git-gui-1.8.5.6-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149941" comment="git-svn-1.8.5.6-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149942" comment="git-web-1.8.5.6-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149943" comment="gitk-1.8.5.6-11.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155662" comment="git-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155665" comment="git-arch-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155663" comment="git-core-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155666" comment="git-cvs-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155667" comment="git-daemon-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155664" comment="git-doc-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155668" comment="git-email-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155669" comment="git-gui-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155670" comment="git-svn-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155671" comment="git-web-2.12.3-26.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155672" comment="gitk-2.12.3-26.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009178221" comment="git-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178233" comment="git-arch-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178222" comment="git-core-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178234" comment="git-cvs-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178235" comment="git-daemon-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178223" comment="git-doc-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178236" comment="git-email-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178237" comment="git-gui-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178238" comment="git-svn-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178239" comment="git-web-2.12.3-27.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178240" comment="gitk-2.12.3-27.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513967" comment="git-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513968" comment="git-arch-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512864" comment="git-core-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513969" comment="git-cvs-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513970" comment="git-daemon-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513971" comment="git-doc-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513972" comment="git-email-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513973" comment="git-gui-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513974" comment="git-svn-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513975" comment="git-web-2.12.3-27.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513976" comment="gitk-2.12.3-27.17.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2189</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2189" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2189" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2189" ref_url="https://www.suse.com/security/cve/CVE-2011-2189" source="SUSE CVE"/>
    <description>
    net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection, as demonstrated by vsftpd.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2189/">CVE-2011-2189</cve>
	<bugzilla href="https://bugzilla.suse.com/698449">SUSE bug 698449</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2199</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2199" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2199" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2199" ref_url="https://www.suse.com/security/cve/CVE-2011-2199" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0734-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00000.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2199/">CVE-2011-2199</cve>
	<bugzilla href="https://bugzilla.suse.com/699714">SUSE bug 699714</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141141" comment="tftp-5.2-10.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141816" comment="tftp-5.2-8.84 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512624" comment="tftp-5.2-11.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2202</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2202" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2202" ref_url="https://www.suse.com/security/cve/CVE-2011-2202" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1137-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1138-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00015.html" source="SUSE-SU"/>
    <description>
    The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2202/">CVE-2011-2202</cve>
	<bugzilla href="https://bugzilla.suse.com/699711">SUSE bug 699711</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2203</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2203" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2203" ref_url="https://www.suse.com/security/cve/CVE-2011-2203" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The hfs_find_init function in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and Oops) by mounting an HFS file system with a malformed MDB extent record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-2203/">CVE-2011-2203</cve>
	<bugzilla href="https://bugzilla.suse.com/699709">SUSE bug 699709</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2213</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2213" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2213" ref_url="https://www.suse.com/security/cve/CVE-2011-2213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-18"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2213/">CVE-2011-2213</cve>
	<bugzilla href="https://bugzilla.suse.com/700879">SUSE bug 700879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2366</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2366" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2366" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2366" ref_url="https://www.suse.com/security/cve/CVE-2011-2366" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-31"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2366/">CVE-2011-2366</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2367</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2367" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2367" ref_url="https://www.suse.com/security/cve/CVE-2011-2367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
    <description>
    The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2367/">CVE-2011-2367</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2368</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2368" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2368" ref_url="https://www.suse.com/security/cve/CVE-2011-2368" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
    <description>
    The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2368/">CVE-2011-2368</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2369</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2369" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2369" ref_url="https://www.suse.com/security/cve/CVE-2011-2369" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2369/">CVE-2011-2369</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2370</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2370" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2370" ref_url="https://www.suse.com/security/cve/CVE-2011-2370" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2370/">CVE-2011-2370</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2371</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2371" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2371" ref_url="https://www.suse.com/security/cve/CVE-2011-2371" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2371/">CVE-2011-2371</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2372</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2372" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2372" ref_url="https://www.suse.com/security/cve/CVE-2011-2372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1079-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2372/">CVE-2011-2372</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2373</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2373" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2373" ref_url="https://www.suse.com/security/cve/CVE-2011-2373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2373/">CVE-2011-2373</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2374</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2374" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2374" ref_url="https://www.suse.com/security/cve/CVE-2011-2374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2374/">CVE-2011-2374</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2375</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2375" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2375" ref_url="https://www.suse.com/security/cve/CVE-2011-2375" source="SUSE CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-06"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2375/">CVE-2011-2375</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2377</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2377" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2377" ref_url="https://www.suse.com/security/cve/CVE-2011-2377" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:028" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0727-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-06/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2377/">CVE-2011-2377</cve>
	<bugzilla href="https://bugzilla.suse.com/701296">SUSE bug 701296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2414</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2414" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2414" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2414" ref_url="https://www.suse.com/security/cve/CVE-2011-2414" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2415.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2414/">CVE-2011-2414</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2415</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2415" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2415" ref_url="https://www.suse.com/security/cve/CVE-2011-2415" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2415/">CVE-2011-2415</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2416</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2416" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2416" ref_url="https://www.suse.com/security/cve/CVE-2011-2416" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2138.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2416/">CVE-2011-2416</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2417</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2417" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2417" ref_url="https://www.suse.com/security/cve/CVE-2011-2417" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2417/">CVE-2011-2417</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2425</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2425" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2425" ref_url="https://www.suse.com/security/cve/CVE-2011-2425" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:033" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0897-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2425/">CVE-2011-2425</cve>
	<bugzilla href="https://bugzilla.suse.com/711427">SUSE bug 711427</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2445</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2445" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2445" ref_url="https://www.suse.com/security/cve/CVE-2011-2445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2445/">CVE-2011-2445</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2450</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2450" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2450" ref_url="https://www.suse.com/security/cve/CVE-2011-2450" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2450/">CVE-2011-2450</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2451</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2451" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2451" ref_url="https://www.suse.com/security/cve/CVE-2011-2451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2451/">CVE-2011-2451</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2452</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2452" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2452" ref_url="https://www.suse.com/security/cve/CVE-2011-2452" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2452/">CVE-2011-2452</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2453</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2453" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2453" ref_url="https://www.suse.com/security/cve/CVE-2011-2453" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2453/">CVE-2011-2453</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2454</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2454" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2454" ref_url="https://www.suse.com/security/cve/CVE-2011-2454" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2454/">CVE-2011-2454</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2455</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2455" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2455" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2455" ref_url="https://www.suse.com/security/cve/CVE-2011-2455" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and CVE-2011-2460.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2455/">CVE-2011-2455</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2456</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2456" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2456" ref_url="https://www.suse.com/security/cve/CVE-2011-2456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2456/">CVE-2011-2456</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2457</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2457" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2457" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2457" ref_url="https://www.suse.com/security/cve/CVE-2011-2457" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2457/">CVE-2011-2457</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2458</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2458" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2458" ref_url="https://www.suse.com/security/cve/CVE-2011-2458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2458/">CVE-2011-2458</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2459</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2459" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2459" ref_url="https://www.suse.com/security/cve/CVE-2011-2459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2460.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2459/">CVE-2011-2459</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2460</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2460" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2460" ref_url="https://www.suse.com/security/cve/CVE-2011-2460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:043" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1244-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1240-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2460/">CVE-2011-2460</cve>
	<bugzilla href="https://bugzilla.suse.com/729797">SUSE bug 729797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2464</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2464" ref_url="https://www.suse.com/security/cve/CVE-2011-2464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:029" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0788-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00006.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2464/">CVE-2011-2464</cve>
	<bugzilla href="https://bugzilla.suse.com/703907">SUSE bug 703907</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2482</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2482" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2482" ref_url="https://www.suse.com/security/cve/CVE-2011-2482" source="SUSE CVE"/>
    <description>
    A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted SCTP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2482/">CVE-2011-2482</cve>
	<bugzilla href="https://bugzilla.suse.com/735611">SUSE bug 735611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750395">SUSE bug 750395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2483</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2483" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2483" ref_url="https://www.suse.com/security/cve/CVE-2011-2483" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:035" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0921-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0921-2" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0970-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0972-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00045.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1137-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1138-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0480-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1670-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1676-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00028.html" source="SUSE-SU"/>
    <description>
    crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2483/">CVE-2011-2483</cve>
	<bugzilla href="https://bugzilla.suse.com/700876">SUSE bug 700876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/701489">SUSE bug 701489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/701491">SUSE bug 701491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/713727">SUSE bug 713727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/738221">SUSE bug 738221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749299">SUSE bug 749299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749301">SUSE bug 749301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749303">SUSE bug 749303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145005" comment="yast2-core-devel-3.1.11-1.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145192" comment="yast2-core-devel-3.1.18-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145375" comment="yast2-core-devel-3.1.23-6.38 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159843" comment="yast2-core-devel-3.2.2-1.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513891" comment="yast2-core-devel-3.3.1-1.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141138" comment="sysvinit-tools-2.88+-96.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141139" comment="whois-5.1.1-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141176" comment="yast2-core-3.1.23-6.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141138" comment="sysvinit-tools-2.88+-96.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147612" comment="whois-5.1.1-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141176" comment="yast2-core-3.1.23-6.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141813" comment="sysvinit-tools-2.88+-94.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141139" comment="whois-5.1.1-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141840" comment="yast2-core-3.1.11-1.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141813" comment="sysvinit-tools-2.88+-94.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141139" comment="whois-5.1.1-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142072" comment="yast2-core-3.1.18-1.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143301" comment="sysvinit-tools-2.88+-94.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141139" comment="whois-5.1.1-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141840" comment="yast2-core-3.1.11-1.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159312" comment="sysvinit-tools-2.88+-99.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141139" comment="whois-5.1.1-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159326" comment="yast2-core-3.2.2-1.29 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159312" comment="sysvinit-tools-2.88+-99.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141139" comment="whois-5.1.1-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512638" comment="yast2-core-3.3.1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513425" comment="sysvinit-tools-2.88+-101.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141139" comment="whois-5.1.1-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512638" comment="yast2-core-3.3.1-1.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2484</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2484" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2484" ref_url="https://www.suse.com/security/cve/CVE-2011-2484" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2484/">CVE-2011-2484</cve>
	<bugzilla href="https://bugzilla.suse.com/703153">SUSE bug 703153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2485</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2485" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2485" ref_url="https://www.suse.com/security/cve/CVE-2011-2485" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000172.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000174.html" source="SUSE-SU"/>
    <description>
    The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a denial of service (memory consumption) via a crafted GIF image file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2485/">CVE-2011-2485</cve>
	<bugzilla href="https://bugzilla.suse.com/702028">SUSE bug 702028</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144761" comment="gdk-pixbuf-devel-2.30.6-1.23 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145237" comment="gdk-pixbuf-devel-2.34.0-16.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159759" comment="gdk-pixbuf-devel-2.34.0-18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513673" comment="gdk-pixbuf-devel-2.34.0-19.17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140591" comment="gdk-pixbuf-lang-2.34.0-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140592" comment="gdk-pixbuf-query-loaders-2.34.0-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140593" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140594" comment="libgdk_pixbuf-2_0-0-2.34.0-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140595" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140596" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140591" comment="gdk-pixbuf-lang-2.34.0-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140592" comment="gdk-pixbuf-query-loaders-2.34.0-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140594" comment="libgdk_pixbuf-2_0-0-2.34.0-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140596" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141352" comment="gdk-pixbuf-lang-2.30.6-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141353" comment="gdk-pixbuf-query-loaders-2.30.6-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141354" comment="gdk-pixbuf-query-loaders-32bit-2.30.6-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141355" comment="libgdk_pixbuf-2_0-0-2.30.6-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141356" comment="libgdk_pixbuf-2_0-0-32bit-2.30.6-1.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141357" comment="typelib-1_0-GdkPixbuf-2_0-2.30.6-1.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158993" comment="gdk-pixbuf-lang-2.34.0-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158994" comment="gdk-pixbuf-query-loaders-2.34.0-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158995" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158996" comment="libgdk_pixbuf-2_0-0-2.34.0-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158997" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158998" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-18.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512139" comment="gdk-pixbuf-lang-2.34.0-19.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512140" comment="gdk-pixbuf-query-loaders-2.34.0-19.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512141" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-19.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512142" comment="libgdk_pixbuf-2_0-0-2.34.0-19.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512143" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-19.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512144" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-19.17.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2489</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2489" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2489" ref_url="https://www.suse.com/security/cve/CVE-2011-2489" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0848-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00039.html" source="SUSE-SU"/>
    <description>
    Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2489/">CVE-2011-2489</cve>
	<bugzilla href="https://bugzilla.suse.com/698772">SUSE bug 698772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147600" comment="opie-2.4-724.56 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141054" comment="opie-2.4-724.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141055" comment="opie-32bit-2.4-724.65 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2490</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2490" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2490" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2490" ref_url="https://www.suse.com/security/cve/CVE-2011-2490" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0848-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00039.html" source="SUSE-SU"/>
    <description>
    opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2490/">CVE-2011-2490</cve>
	<bugzilla href="https://bugzilla.suse.com/698772">SUSE bug 698772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147600" comment="opie-2.4-724.56 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141054" comment="opie-2.4-724.65 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141055" comment="opie-32bit-2.4-724.65 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2491</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2491" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2491" ref_url="https://www.suse.com/security/cve/CVE-2011-2491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:034" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0861-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2491/">CVE-2011-2491</cve>
	<bugzilla href="https://bugzilla.suse.com/702013">SUSE bug 702013</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2492</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2492" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2492" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2492" ref_url="https://www.suse.com/security/cve/CVE-2011-2492" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2492/">CVE-2011-2492</cve>
	<bugzilla href="https://bugzilla.suse.com/702014">SUSE bug 702014</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2493</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2493" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2493" ref_url="https://www.suse.com/security/cve/CVE-2011-2493" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0860-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00002.html" source="SUSE-SU"/>
    <description>
    The ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certain error-report data structure, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-2493/">CVE-2011-2493</cve>
	<bugzilla href="https://bugzilla.suse.com/701998">SUSE bug 701998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2494</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2494" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2494" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2494" ref_url="https://www.suse.com/security/cve/CVE-2011-2494" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user's password.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-2494/">CVE-2011-2494</cve>
	<bugzilla href="https://bugzilla.suse.com/703156">SUSE bug 703156</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2497</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2497" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2497" ref_url="https://www.suse.com/security/cve/CVE-2011-2497" source="SUSE CVE"/>
    <description>
    Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2497/">CVE-2011-2497</cve>
	<bugzilla href="https://bugzilla.suse.com/702286">SUSE bug 702286</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2501</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2501" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2501" ref_url="https://www.suse.com/security/cve/CVE-2011-2501" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data.  NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2501/">CVE-2011-2501</cve>
	<bugzilla href="https://bugzilla.suse.com/702578">SUSE bug 702578</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119222" comment="libpng12-0-32bit-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119225" comment="libpng16-16-32bit-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119234" comment="libpng12-compat-devel-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119235" comment="libpng12-devel-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119236" comment="libpng16-compat-devel-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119237" comment="libpng16-devel-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141585" comment="libpng16-16-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141586" comment="libpng16-16-32bit-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105438" comment="libpng16-16-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105439" comment="libpng16-16-32bit-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144907" comment="libpng12-compat-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144908" comment="libpng12-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105440" comment="libpng16-compat-devel-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105442" comment="libpng16-devel-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144907" comment="libpng12-compat-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144908" comment="libpng12-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144909" comment="libpng16-compat-devel-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144910" comment="libpng16-devel-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149948" comment="libpng16-16-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149949" comment="libpng16-16-32bit-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150210" comment="libpng16-compat-devel-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150211" comment="libpng16-devel-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2511</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2511" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2511" ref_url="https://www.suse.com/security/cve/CVE-2011-2511" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0900-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00019.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-2511/">CVE-2011-2511</cve>
	<bugzilla href="https://bugzilla.suse.com/703084">SUSE bug 703084</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144947" comment="libvirt-devel-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145170" comment="libvirt-devel-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145337" comment="libvirt-devel-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159830" comment="libvirt-devel-3.3.0-4.28 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513838" comment="libvirt-devel-4.0.0-6.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514203" comment="libvirt-devel-5.1.0-11.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143259" comment="libvirt-lock-sanlock-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143366" comment="libvirt-lock-sanlock-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159245" comment="libvirt-lock-sanlock-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159246" comment="libvirt-nss-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513554" comment="libvirt-daemon-hooks-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513555" comment="libvirt-lock-sanlock-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513556" comment="libvirt-nss-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513265" comment="libvirt-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513266" comment="libvirt-admin-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513267" comment="libvirt-client-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513268" comment="libvirt-daemon-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513269" comment="libvirt-daemon-config-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513270" comment="libvirt-daemon-config-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513271" comment="libvirt-daemon-driver-interface-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513272" comment="libvirt-daemon-driver-libxl-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513273" comment="libvirt-daemon-driver-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513274" comment="libvirt-daemon-driver-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513275" comment="libvirt-daemon-driver-nodedev-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513276" comment="libvirt-daemon-driver-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513277" comment="libvirt-daemon-driver-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513278" comment="libvirt-daemon-driver-secret-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513279" comment="libvirt-daemon-driver-storage-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513280" comment="libvirt-daemon-driver-storage-core-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513281" comment="libvirt-daemon-driver-storage-disk-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513282" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513283" comment="libvirt-daemon-driver-storage-logical-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513284" comment="libvirt-daemon-driver-storage-mpath-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513285" comment="libvirt-daemon-driver-storage-rbd-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513286" comment="libvirt-daemon-driver-storage-scsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513287" comment="libvirt-daemon-hooks-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513288" comment="libvirt-daemon-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513289" comment="libvirt-daemon-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513290" comment="libvirt-daemon-xen-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513291" comment="libvirt-doc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513292" comment="libvirt-libs-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513293" comment="libvirt-lock-sanlock-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513294" comment="libvirt-nss-5.1.0-11.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2513</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2513" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2513" ref_url="https://www.suse.com/security/cve/CVE-2011-2513" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0829-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00032.html" source="SUSE-SU"/>
    <description>
    The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2513/">CVE-2011-2513</cve>
	<bugzilla href="https://bugzilla.suse.com/704309">SUSE bug 704309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141421" comment="java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114769" comment="java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141887" comment="java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159646" comment="java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159647" comment="java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2514</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2514" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2514" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2514" ref_url="https://www.suse.com/security/cve/CVE-2011-2514" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0829-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00032.html" source="SUSE-SU"/>
    <description>
    The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warning dialog box to represent a different filename than the file for which access will be granted.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2514/">CVE-2011-2514</cve>
	<bugzilla href="https://bugzilla.suse.com/704309">SUSE bug 704309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141421" comment="java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114769" comment="java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141887" comment="java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159646" comment="java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159647" comment="java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2517</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2517" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2517" ref_url="https://www.suse.com/security/cve/CVE-2011-2517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:031" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0832-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability during scan operations with a long SSID value.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2517/">CVE-2011-2517</cve>
	<bugzilla href="https://bugzilla.suse.com/703410">SUSE bug 703410</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2518</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2518" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2518" ref_url="https://www.suse.com/security/cve/CVE-2011-2518" source="SUSE CVE"/>
    <description>
    The tomoyo_mount_acl function in security/tomoyo/mount.c in the Linux kernel before 2.6.39.2 calls the kern_path function with arguments taken directly from a mount system call, which allows local users to cause a denial of service (OOPS) or possibly have unspecified other impact via a NULL value for the device name.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-03-01"/>
	<updated date="2023-03-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2518/">CVE-2011-2518</cve>
	<bugzilla href="https://bugzilla.suse.com/703158">SUSE bug 703158</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2522</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2522" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2522" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2522" ref_url="https://www.suse.com/security/cve/CVE-2011-2522" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0998-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2522/">CVE-2011-2522</cve>
	<bugzilla href="https://bugzilla.suse.com/705241">SUSE bug 705241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2525</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2525" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2525" ref_url="https://www.suse.com/security/cve/CVE-2011-2525" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
    <description>
    The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2525/">CVE-2011-2525</cve>
	<bugzilla href="https://bugzilla.suse.com/735612">SUSE bug 735612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2534</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2534" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2534" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2534" ref_url="https://www.suse.com/security/cve/CVE-2011-2534" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel before 2.6.39 might allow local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a terminating '\0' character.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2534/">CVE-2011-2534</cve>
	<bugzilla href="https://bugzilla.suse.com/681182">SUSE bug 681182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/702037">SUSE bug 702037</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2597</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2597" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2597" ref_url="https://www.suse.com/security/cve/CVE-2011-2597" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00022.html" source="SUSE-SU"/>
    <description>
    The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2597/">CVE-2011-2597</cve>
	<bugzilla href="https://bugzilla.suse.com/706728">SUSE bug 706728</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2689</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2689" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2689" ref_url="https://www.suse.com/security/cve/CVE-2011-2689" source="SUSE CVE"/>
    <description>
    The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2689/">CVE-2011-2689</cve>
	<bugzilla href="https://bugzilla.suse.com/710672">SUSE bug 710672</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2690</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2690" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2690" ref_url="https://www.suse.com/security/cve/CVE-2011-2690" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2690/">CVE-2011-2690</cve>
	<bugzilla href="https://bugzilla.suse.com/706387">SUSE bug 706387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/706388">SUSE bug 706388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009105440" comment="libpng16-compat-devel-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105442" comment="libpng16-devel-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119225" comment="libpng16-16-32bit-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119236" comment="libpng16-compat-devel-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119237" comment="libpng16-devel-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141585" comment="libpng16-16-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141586" comment="libpng16-16-32bit-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105438" comment="libpng16-16-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105439" comment="libpng16-16-32bit-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144909" comment="libpng16-compat-devel-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144910" comment="libpng16-devel-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150210" comment="libpng16-compat-devel-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150211" comment="libpng16-devel-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149948" comment="libpng16-16-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149949" comment="libpng16-16-32bit-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2691</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2691" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2691" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2691" ref_url="https://www.suse.com/security/cve/CVE-2011-2691" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2691/">CVE-2011-2691</cve>
	<bugzilla href="https://bugzilla.suse.com/706388">SUSE bug 706388</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009105440" comment="libpng16-compat-devel-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105442" comment="libpng16-devel-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119225" comment="libpng16-16-32bit-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119236" comment="libpng16-compat-devel-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119237" comment="libpng16-devel-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141585" comment="libpng16-16-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141586" comment="libpng16-16-32bit-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105438" comment="libpng16-16-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105439" comment="libpng16-16-32bit-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144909" comment="libpng16-compat-devel-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144910" comment="libpng16-devel-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150210" comment="libpng16-compat-devel-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150211" comment="libpng16-devel-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149948" comment="libpng16-16-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149949" comment="libpng16-16-32bit-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2692</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2692" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2692" ref_url="https://www.suse.com/security/cve/CVE-2011-2692" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0915-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2692/">CVE-2011-2692</cve>
	<bugzilla href="https://bugzilla.suse.com/706389">SUSE bug 706389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009105440" comment="libpng16-compat-devel-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105442" comment="libpng16-devel-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119225" comment="libpng16-16-32bit-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119236" comment="libpng16-compat-devel-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119237" comment="libpng16-devel-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141585" comment="libpng16-16-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141586" comment="libpng16-16-32bit-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105438" comment="libpng16-16-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105439" comment="libpng16-16-32bit-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144909" comment="libpng16-compat-devel-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144910" comment="libpng16-devel-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150210" comment="libpng16-compat-devel-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150211" comment="libpng16-devel-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149948" comment="libpng16-16-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149949" comment="libpng16-16-32bit-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2694</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2694" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2694" ref_url="https://www.suse.com/security/cve/CVE-2011-2694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0998-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2694/">CVE-2011-2694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2695</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2695" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2695" ref_url="https://www.suse.com/security/cve/CVE-2011-2695" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2695/">CVE-2011-2695</cve>
	<bugzilla href="https://bugzilla.suse.com/706374">SUSE bug 706374</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2696</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2696" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2696" ref_url="https://www.suse.com/security/cve/CVE-2011-2696" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0854-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0855-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2696/">CVE-2011-2696</cve>
	<bugzilla href="https://bugzilla.suse.com/705681">SUSE bug 705681</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105599" comment="libsndfile-devel-1.0.25-21.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119287" comment="libsndfile-devel-1.0.25-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144931" comment="libsndfile-devel-1.0.25-18.75 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155690" comment="libsndfile-devel-1.0.25-35.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513827" comment="libsndfile-devel-1.0.25-36.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009105600" comment="libsndfile1-1.0.25-21.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105601" comment="libsndfile1-32bit-1.0.25-21.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119272" comment="libsndfile1-32bit-1.0.25-25.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141680" comment="libsndfile1-1.0.25-18.75 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141681" comment="libsndfile1-32bit-1.0.25-18.75 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155684" comment="libsndfile1-1.0.25-35.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155685" comment="libsndfile1-32bit-1.0.25-35.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512465" comment="libsndfile1-1.0.25-36.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512466" comment="libsndfile1-32bit-1.0.25-36.16.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2697</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2697" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2697" ref_url="https://www.suse.com/security/cve/CVE-2011-2697" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0892-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00017.html" source="SUSE-SU"/>
    <description>
    foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2697/">CVE-2011-2697</cve>
	<bugzilla href="https://bugzilla.suse.com/59233">SUSE bug 59233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698451">SUSE bug 698451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/704608">SUSE bug 704608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/852368">SUSE bug 852368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957531">SUSE bug 957531</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144779" comment="hplip-devel-3.14.6-3.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145041" comment="hplip-devel-3.14.6-3.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159763" comment="hplip-devel-3.16.11-1.33 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140679" comment="hplip-3.14.6-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140680" comment="hplip-hpijs-3.14.6-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140681" comment="hplip-sane-3.14.6-3.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141414" comment="hplip-3.14.6-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141415" comment="hplip-hpijs-3.14.6-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141416" comment="hplip-sane-3.14.6-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159029" comment="hplip-3.16.11-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159030" comment="hplip-hpijs-3.16.11-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159031" comment="hplip-sane-3.16.11-1.33 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2698</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2698" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2698" ref_url="https://www.suse.com/security/cve/CVE-2011-2698" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (infinite loop) via an invalid packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2698/">CVE-2011-2698</cve>
	<bugzilla href="https://bugzilla.suse.com/706728">SUSE bug 706728</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2699</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2699" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2699" ref_url="https://www.suse.com/security/cve/CVE-2011-2699" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0115-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2699/">CVE-2011-2699</cve>
	<bugzilla href="https://bugzilla.suse.com/707288">SUSE bug 707288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2700</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2700" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2700" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2700" ref_url="https://www.suse.com/security/cve/CVE-2011-2700" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the si4713_write_econtrol_string function in drivers/media/radio/si4713-i2c.c in the Linux kernel before 2.6.39.4 on the N900 platform might allow local users to cause a denial of service or have unspecified other impact via a crafted s_ext_ctrls operation with a (1) V4L2_CID_RDS_TX_PS_NAME or (2) V4L2_CID_RDS_TX_RADIO_TEXT control ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2700/">CVE-2011-2700</cve>
	<bugzilla href="https://bugzilla.suse.com/707332">SUSE bug 707332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2707</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2707" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2707" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2707" ref_url="https://www.suse.com/security/cve/CVE-2011-2707" source="SUSE CVE"/>
    <description>
    The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACE_SETXTREGS request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2707/">CVE-2011-2707</cve>
	<bugzilla href="https://bugzilla.suse.com/707337">SUSE bug 707337</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2709</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2709" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2709" ref_url="https://www.suse.com/security/cve/CVE-2011-2709" source="SUSE CVE"/>
    <description>
    libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2709/">CVE-2011-2709</cve>
	<bugzilla href="https://bugzilla.suse.com/694598">SUSE bug 694598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144864" comment="libgssglue-devel-0.4-3.83 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147565" comment="libgssglue1-0.4-3.76 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140845" comment="libgssglue1-0.4-3.83 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140846" comment="libgssglue1-32bit-0.4-3.83 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2721</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2721" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2721" ref_url="https://www.suse.com/security/cve/CVE-2011-2721" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:0940-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-08/msg00033.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2721/">CVE-2011-2721</cve>
	<bugzilla href="https://bugzilla.suse.com/708263">SUSE bug 708263</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009109618" comment="clamav-0.98.7-13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140489" comment="clamav-0.99.2-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141235" comment="clamav-0.98.4-1.46 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157660" comment="clamav-0.99.2-32.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512064" comment="clamav-0.100.2-33.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512760" comment="clamav-0.101.3-1.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2722</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2722" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2722" ref_url="https://www.suse.com/security/cve/CVE-2011-2722" source="SUSE CVE"/>
    <description>
    The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-2722/">CVE-2011-2722</cve>
	<bugzilla href="https://bugzilla.suse.com/59233">SUSE bug 59233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/698451">SUSE bug 698451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/704608">SUSE bug 704608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/713717">SUSE bug 713717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/808355">SUSE bug 808355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144779" comment="hplip-devel-3.14.6-3.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145041" comment="hplip-devel-3.14.6-3.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159763" comment="hplip-devel-3.16.11-1.33 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140679" comment="hplip-3.14.6-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140680" comment="hplip-hpijs-3.14.6-3.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140681" comment="hplip-sane-3.14.6-3.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141414" comment="hplip-3.14.6-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141415" comment="hplip-hpijs-3.14.6-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141416" comment="hplip-sane-3.14.6-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159029" comment="hplip-3.16.11-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159030" comment="hplip-hpijs-3.16.11-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159031" comment="hplip-sane-3.16.11-1.33 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2724</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP5</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2724" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2724" ref_url="https://www.suse.com/security/cve/CVE-2011-2724" source="SUSE CVE"/>
    <description>
    The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2011-2724/">CVE-2011-2724</cve>
	<bugzilla href="https://bugzilla.suse.com/1160791">SUSE bug 1160791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/709819">SUSE bug 709819</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125858" comment="SUSE Linux Enterprise High Availability Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135880" comment="SUSE Linux Enterprise High Availability Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159727" comment="SUSE Linux Enterprise High Availability Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240272" comment="SUSE Linux Enterprise High Availability Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009273143" comment="SUSE Linux Enterprise High Availability Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336017" comment="ctdb is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334846" comment="libsamba-errors0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335571" comment="libsamba-errors0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334965" comment="libsmbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334853" comment="libsmbldap0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334967" comment="libsmbldap0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334979" comment="libdcerpc-atsvc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334846" comment="libsamba-errors0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335571" comment="libsamba-errors0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334965" comment="libsmbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334853" comment="libsmbldap0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334967" comment="libsmbldap0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334984" comment="libndr-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334985" comment="libndr-krb5pac-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334986" comment="libndr-nbt-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334987" comment="libndr-standard-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334995" comment="libsamba-util-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334997" comment="libsmbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335004" comment="libwbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335005" comment="samba-core-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334993" comment="libsamba-policy-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341005" comment="libsamba-policy-python3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337106" comment="samba-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664362" comment="samba-devel-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336017" comment="ctdb is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334974" comment="libgensec0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334953" comment="libgensec0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334975" comment="libregistry0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334976" comment="libsmbclient-raw0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334964" comment="libsmbclient-raw0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334965" comment="libsmbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334853" comment="libsmbldap0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334967" comment="libsmbldap0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334970" comment="samba-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341005" comment="libsamba-policy-python3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341006" comment="libsamba-policy0-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664706" comment="libsamba-policy0-python3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664360" comment="samba-client-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664361" comment="samba-client-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337106" comment="samba-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654606" comment="samba-ldb-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338828" comment="samba-libs-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338829" comment="samba-libs-python3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341011" comment="samba-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664363" comment="samba-tool is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664364" comment="samba-winbind-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664365" comment="samba-winbind-libs-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2729</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2729" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2729" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2729" ref_url="https://www.suse.com/security/cve/CVE-2011-2729" source="SUSE CVE"/>
		<reference ref_id="TID7009193" ref_url="https://www.suse.com/support/kb/doc/?id=7009193" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1062-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html" source="SUSE-SU"/>
    <description>
    native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2729/">CVE-2011-2729</cve>
	<bugzilla href="https://bugzilla.suse.com/715656">SUSE bug 715656</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140450" comment="apache-commons-daemon-1.0.15-4.221 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140451" comment="apache-commons-daemon-javadoc-1.0.15-4.221 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147510" comment="apache-commons-daemon-1.0.15-4.181 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147511" comment="apache-commons-daemon-javadoc-1.0.15-4.181 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158929" comment="apache-commons-daemon-1.0.15-6.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158930" comment="apache-commons-daemon-javadoc-1.0.15-6.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2748</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2748" ref_url="https://www.suse.com/security/cve/CVE-2011-2748" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html" source="SUSE-SU"/>
    <description>
    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2748/">CVE-2011-2748</cve>
	<bugzilla href="https://bugzilla.suse.com/712653">SUSE bug 712653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2749</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2749" ref_url="https://www.suse.com/security/cve/CVE-2011-2749" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1021-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html" source="SUSE-SU"/>
    <description>
    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2749/">CVE-2011-2749</cve>
	<bugzilla href="https://bugzilla.suse.com/712653">SUSE bug 712653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2766</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2766" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2766" ref_url="https://www.suse.com/security/cve/CVE-2011-2766" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0004-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0036-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00014.html" source="SUSE-SU"/>
    <description>
    The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2766/">CVE-2011-2766</cve>
	<bugzilla href="https://bugzilla.suse.com/735882">SUSE bug 735882</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144701" comment="FastCGI-2.4.0-167.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144702" comment="perl-FastCGI-2.4.0-167.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159736" comment="FastCGI-2.4.0-168.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159737" comment="FastCGI-devel-2.4.0-168.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159738" comment="perl-FastCGI-2.4.0-168.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2767" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2767" ref_url="https://www.suse.com/security/cve/CVE-2011-2767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:3213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006233.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:14266-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-202014266-1.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2549-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:2558-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00065.html" source="SUSE-SU"/>
    <description>
    mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2011-2767/">CVE-2011-2767</cve>
	<bugzilla href="https://bugzilla.suse.com/1156944">SUSE bug 1156944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009542338" comment="apache2-mod_perl-devel-2.0.8-13.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557422" comment="apache2-mod_perl-2.0.8-13.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009558314" comment="apache2-mod_perl-2.0.8-13.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2895</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2895" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2895" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2895" ref_url="https://www.suse.com/security/cve/CVE-2011-2895" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1035-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1035-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00004.html" source="SUSE-SU"/>
    <description>
    The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2895/">CVE-2011-2895</cve>
	<bugzilla href="https://bugzilla.suse.com/709851">SUSE bug 709851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711487">SUSE bug 711487</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108652" comment="libXfont-devel-1.4.7-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145003" comment="xorg-x11-devel-7.6-45.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108654" comment="libXfont1-1.4.7-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141836" comment="xorg-x11-libs-7.6-45.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140752" comment="libXfont1-1.5.1-10.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141172" comment="xorg-x11-libs-7.6-45.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140752" comment="libXfont1-1.5.1-10.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141836" comment="xorg-x11-libs-7.6-45.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141437" comment="libXfont1-1.4.7-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141172" comment="xorg-x11-libs-7.6-45.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141437" comment="libXfont1-1.4.7-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141836" comment="xorg-x11-libs-7.6-45.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144793" comment="libXfont-devel-1.4.7-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145003" comment="xorg-x11-devel-7.6-45.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145283" comment="libXfont-devel-1.5.1-10.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145190" comment="xorg-x11-devel-7.6-45.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170838" comment="libXfont1-1.5.1-11.3.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141172" comment="xorg-x11-libs-7.6-45.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170838" comment="libXfont1-1.5.1-11.3.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141836" comment="xorg-x11-libs-7.6-45.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170858" comment="libXfont-devel-1.5.1-11.3.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145190" comment="xorg-x11-devel-7.6-45.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2896</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2896" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2896" ref_url="https://www.suse.com/security/cve/CVE-2011-2896" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1152-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00020.html" source="SUSE-SU"/>
    <description>
    The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2896/">CVE-2011-2896</cve>
	<bugzilla href="https://bugzilla.suse.com/601830">SUSE bug 601830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/671735">SUSE bug 671735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680210">SUSE bug 680210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/680212">SUSE bug 680212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/700987">SUSE bug 700987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711490">SUSE bug 711490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/711491">SUSE bug 711491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/715643">SUSE bug 715643</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141368" comment="gimp-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141369" comment="gimp-lang-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141370" comment="gimp-plugins-python-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142102" comment="gimp-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142103" comment="gimp-lang-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142104" comment="gimp-plugins-python-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144763" comment="gimp-devel-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145239" comment="gimp-devel-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150803" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150804" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150805" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150808" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167012" comment="gimp-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167013" comment="gimp-lang-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167014" comment="gimp-plugins-python-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167017" comment="gimp-devel-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2898</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2898" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2898" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2898" ref_url="https://www.suse.com/security/cve/CVE-2011-2898" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    net/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-2898/">CVE-2011-2898</cve>
	<bugzilla href="https://bugzilla.suse.com/710235">SUSE bug 710235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2905</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2905" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2905" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2905" ref_url="https://www.suse.com/security/cve/CVE-2011-2905" source="SUSE CVE"/>
    <description>
    Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2905/">CVE-2011-2905</cve>
	<bugzilla href="https://bugzilla.suse.com/711414">SUSE bug 711414</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2909</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2909" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2909" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2909" ref_url="https://www.suse.com/security/cve/CVE-2011-2909" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The do_devinfo_ioctl function in drivers/staging/comedi/comedi_fops.c in the Linux kernel before 3.1 allows local users to obtain sensitive information from kernel memory via a copy of a short string.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2909/">CVE-2011-2909</cve>
	<bugzilla href="https://bugzilla.suse.com/711941">SUSE bug 711941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2918</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2918" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2918" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2918" ref_url="https://www.suse.com/security/cve/CVE-2011-2918" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:038" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:0984-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events, which allows local users to cause a denial of service (system hang) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2918/">CVE-2011-2918</cve>
	<bugzilla href="https://bugzilla.suse.com/712366">SUSE bug 712366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/713650">SUSE bug 713650</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2928</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2928" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2928" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2928" ref_url="https://www.suse.com/security/cve/CVE-2011-2928" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2928/">CVE-2011-2928</cve>
	<bugzilla href="https://bugzilla.suse.com/713430">SUSE bug 713430</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2942</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2942" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2942" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2942" ref_url="https://www.suse.com/security/cve/CVE-2011-2942" source="SUSE CVE"/>
    <description>
    A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2942/">CVE-2011-2942</cve>
	<bugzilla href="https://bugzilla.suse.com/726064">SUSE bug 726064</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2985</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2985" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2985" ref_url="https://www.suse.com/security/cve/CVE-2011-2985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2985/">CVE-2011-2985</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2986</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2986" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2986" ref_url="https://www.suse.com/security/cve/CVE-2011-2986" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2986/">CVE-2011-2986</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2988</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2988" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2988" ref_url="https://www.suse.com/security/cve/CVE-2011-2988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in an unspecified string class in the WebGL shader implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long source-code block for a shader.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2988/">CVE-2011-2988</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2989</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2989" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2989" ref_url="https://www.suse.com/security/cve/CVE-2011-2989" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement WebGL, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2989/">CVE-2011-2989</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2990</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2990" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2990" ref_url="https://www.suse.com/security/cve/CVE-2011-2990" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The implementation of Content Security Policy (CSP) violation reports in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not remove proxy-authorization credentials from the listed request headers, which allows attackers to obtain sensitive information by reading a report, related to incorrect host resolution that occurs with certain redirects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2990/">CVE-2011-2990</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2991</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2991" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2991" ref_url="https://www.suse.com/security/cve/CVE-2011-2991" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement JavaScript, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2991/">CVE-2011-2991</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2992</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2992" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2992" ref_url="https://www.suse.com/security/cve/CVE-2011-2992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2992/">CVE-2011-2992</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2993</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2993" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2993" ref_url="https://www.suse.com/security/cve/CVE-2011-2993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:037" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0957-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-08/msg00026.html" source="SUSE-SU"/>
    <description>
    The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned JavaScript code to signed code, which allows remote attackers to bypass the Same Origin Policy and gain privileges via a crafted web site, a different vulnerability than CVE-2008-2801.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2993/">CVE-2011-2993</cve>
	<bugzilla href="https://bugzilla.suse.com/712224">SUSE bug 712224</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2995</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2995" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2995" ref_url="https://www.suse.com/security/cve/CVE-2011-2995" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1079-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00030.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2995/">CVE-2011-2995</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2996</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2996" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2996" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2996" ref_url="https://www.suse.com/security/cve/CVE-2011-2996" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1079-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2996/">CVE-2011-2996</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2997</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-2997" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2997" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-2997" ref_url="https://www.suse.com/security/cve/CVE-2011-2997" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2997/">CVE-2011-2997</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3000</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3000" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3000" ref_url="https://www.suse.com/security/cve/CVE-2011-3000" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1079-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3000/">CVE-2011-3000</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3001</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3001" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3001" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3001" ref_url="https://www.suse.com/security/cve/CVE-2011-3001" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3001/">CVE-2011-3001</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3002</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3002" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3002" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3002" ref_url="https://www.suse.com/security/cve/CVE-2011-3002" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
    <description>
    Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 7.0 and SeaMonkey before 2.4, does not validate the return value of a GrowAtomTable function call, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a memory-allocation error and a resulting buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3002/">CVE-2011-3002</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3003</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3003" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3003" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3003" ref_url="https://www.suse.com/security/cve/CVE-2011-3003" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unspecified WebGL test case that triggers a memory-allocation error and a resulting out-of-bounds write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3003/">CVE-2011-3003</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3004</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3004" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3004" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3004" ref_url="https://www.suse.com/security/cve/CVE-2011-3004" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
    <description>
    The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3004/">CVE-2011-3004</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3005</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3005" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3005" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3005" ref_url="https://www.suse.com/security/cve/CVE-2011-3005" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3005/">CVE-2011-3005</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3026</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3026" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3026" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3026" ref_url="https://www.suse.com/security/cve/CVE-2011-3026" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0303-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0318-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0297-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0316-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3026/">CVE-2011-3026</cve>
	<bugzilla href="https://bugzilla.suse.com/747311">SUSE bug 747311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747327">SUSE bug 747327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747328">SUSE bug 747328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/773612">SUSE bug 773612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144907" comment="libpng12-compat-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144908" comment="libpng12-devel-1.2.50-8.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119222" comment="libpng12-0-32bit-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119234" comment="libpng12-compat-devel-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119235" comment="libpng12-devel-1.2.50-13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144907" comment="libpng12-compat-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144908" comment="libpng12-devel-1.2.50-8.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3045</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3045" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3045" ref_url="https://www.suse.com/security/cve/CVE-2011-3045" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0432-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0466-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00000.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3045/">CVE-2011-3045</cve>
	<bugzilla href="https://bugzilla.suse.com/752008">SUSE bug 752008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754456">SUSE bug 754456</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119222" comment="libpng12-0-32bit-1.2.50-13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119234" comment="libpng12-compat-devel-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119235" comment="libpng12-devel-1.2.50-13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144907" comment="libpng12-compat-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144908" comment="libpng12-devel-1.2.50-8.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3048</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3048" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3048" ref_url="https://www.suse.com/security/cve/CVE-2011-3048" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0732-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000137.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00031.html" source="SUSE-SU"/>
    <description>
    The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3048/">CVE-2011-3048</cve>
	<bugzilla href="https://bugzilla.suse.com/754745">SUSE bug 754745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854395">SUSE bug 854395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119222" comment="libpng12-0-32bit-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119234" comment="libpng12-compat-devel-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119235" comment="libpng12-devel-1.2.50-13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144907" comment="libpng12-compat-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144908" comment="libpng12-devel-1.2.50-8.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3062</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3062" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3062" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3062" ref_url="https://www.suse.com/security/cve/CVE-2011-3062" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3062/">CVE-2011-3062</cve>
	<bugzilla href="https://bugzilla.suse.com/754458">SUSE bug 754458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3101</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3101" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3101" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3101" ref_url="https://www.suse.com/security/cve/CVE-2011-3101" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0656-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors.  NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3101/">CVE-2011-3101</cve>
	<bugzilla href="https://bugzilla.suse.com/762481">SUSE bug 762481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3146</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3146" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3146" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3146" ref_url="https://www.suse.com/security/cve/CVE-2011-3146" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1090-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00003.html" source="SUSE-SU"/>
    <description>
    librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3146/">CVE-2011-3146</cve>
	<bugzilla href="https://bugzilla.suse.com/714980">SUSE bug 714980</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140597" comment="gdk-pixbuf-loader-rsvg-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140598" comment="librsvg-2-2-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140599" comment="librsvg-2-2-32bit-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140600" comment="rsvg-view-2.40.15-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140597" comment="gdk-pixbuf-loader-rsvg-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140598" comment="librsvg-2-2-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140600" comment="rsvg-view-2.40.15-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141358" comment="gdk-pixbuf-loader-rsvg-2.40.2-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141359" comment="librsvg-2-2-2.40.2-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141360" comment="librsvg-2-2-32bit-2.40.2-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141361" comment="rsvg-view-2.40.2-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144926" comment="librsvg-devel-2.40.2-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144927" comment="typelib-1_0-Rsvg-2_0-2.40.2-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145317" comment="librsvg-devel-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145318" comment="typelib-1_0-Rsvg-2_0-2.40.15-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009175785" comment="gdk-pixbuf-loader-rsvg-2.40.20-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175787" comment="librsvg-2-2-2.40.20-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175788" comment="librsvg-2-2-32bit-2.40.20-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175789" comment="rsvg-view-2.40.20-5.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009175898" comment="librsvg-devel-2.40.20-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175899" comment="typelib-1_0-Rsvg-2_0-2.40.20-5.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3148</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3148" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3148" ref_url="https://www.suse.com/security/cve/CVE-2011-3148" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1218-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00005.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3148/">CVE-2011-3148</cve>
	<bugzilla href="https://bugzilla.suse.com/724480">SUSE bug 724480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144979" comment="pam-devel-1.1.8-11.57 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145178" comment="pam-devel-1.1.8-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155981" comment="pam-devel-1.1.8-23.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513868" comment="pam-devel-1.1.8-24.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514236" comment="pam-devel-1.1.8-24.27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141057" comment="pam-32bit-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141764" comment="pam-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141765" comment="pam-32bit-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141766" comment="pam-doc-1.1.8-11.57 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155972" comment="pam-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155973" comment="pam-32bit-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155974" comment="pam-doc-1.1.8-23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512585" comment="pam-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512586" comment="pam-32bit-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512587" comment="pam-doc-1.1.8-24.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513344" comment="pam-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513345" comment="pam-32bit-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513346" comment="pam-doc-1.1.8-24.27.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3149</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3149" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3149" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3149" ref_url="https://www.suse.com/security/cve/CVE-2011-3149" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1207-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1209-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1218-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1208-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00005.html" source="SUSE-SU"/>
    <description>
    The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3149/">CVE-2011-3149</cve>
	<bugzilla href="https://bugzilla.suse.com/724480">SUSE bug 724480</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144979" comment="pam-devel-1.1.8-11.57 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145178" comment="pam-devel-1.1.8-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155981" comment="pam-devel-1.1.8-23.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513868" comment="pam-devel-1.1.8-24.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514236" comment="pam-devel-1.1.8-24.27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141057" comment="pam-32bit-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141056" comment="pam-1.1.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141058" comment="pam-doc-1.1.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141764" comment="pam-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141765" comment="pam-32bit-1.1.8-11.57 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141766" comment="pam-doc-1.1.8-11.57 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155972" comment="pam-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155973" comment="pam-32bit-1.1.8-23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155974" comment="pam-doc-1.1.8-23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512585" comment="pam-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512586" comment="pam-32bit-1.1.8-24.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512587" comment="pam-doc-1.1.8-24.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513344" comment="pam-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513345" comment="pam-32bit-1.1.8-24.27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513346" comment="pam-doc-1.1.8-24.27.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3172</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3172" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3172" ref_url="https://www.suse.com/security/cve/CVE-2011-3172" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:1760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-June/004204.html" source="SUSE-SU"/>
    <description>
    A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions prior to 12.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3172/">CVE-2011-3172</cve>
	<bugzilla href="https://bugzilla.suse.com/1149683">SUSE bug 1149683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/707645">SUSE bug 707645</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141059" comment="pam-modules-12.1-23.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141059" comment="pam-modules-12.1-23.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141060" comment="pam-modules-32bit-12.1-23.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141767" comment="pam-modules-12.1-23.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141060" comment="pam-modules-32bit-12.1-23.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3177</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3177" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3177" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3177" ref_url="https://www.suse.com/security/cve/CVE-2011-3177" source="SUSE CVE"/>
    <description>
    The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3177/">CVE-2011-3177</cve>
	<bugzilla href="https://bugzilla.suse.com/713661">SUSE bug 713661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145375" comment="yast2-core-devel-3.1.23-6.38 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159843" comment="yast2-core-devel-3.2.2-1.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513891" comment="yast2-core-devel-3.3.1-1.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009137922" comment="yast2-3.1.108-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141840" comment="yast2-core-3.1.11-1.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141175" comment="yast2-3.1.206-37.1.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141176" comment="yast2-core-3.1.23-6.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141839" comment="yast2-3.1.108-1.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141840" comment="yast2-core-3.1.11-1.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142071" comment="yast2-3.1.155-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142072" comment="yast2-core-3.1.18-1.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145005" comment="yast2-core-devel-3.1.11-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145006" comment="yast2-devel-doc-3.1.108-1.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145192" comment="yast2-core-devel-3.1.18-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145193" comment="yast2-devel-doc-3.1.155-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147616" comment="yast2-3.1.206-36.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141176" comment="yast2-core-3.1.23-6.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159325" comment="yast2-3.2.36-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159326" comment="yast2-core-3.2.2-1.29 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512637" comment="yast2-3.2.48-3.29.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512638" comment="yast2-core-3.3.1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513455" comment="yast2-3.2.50-4.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512638" comment="yast2-core-3.3.1-1.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3188</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3188" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3188" ref_url="https://www.suse.com/security/cve/CVE-2011-3188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
    <description>
    The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3188/">CVE-2011-3188</cve>
	<bugzilla href="https://bugzilla.suse.com/713650">SUSE bug 713650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/737874">SUSE bug 737874</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3191</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3191" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3191" ref_url="https://www.suse.com/security/cve/CVE-2011-3191" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:040" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SA:2011:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1058-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-05"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3191/">CVE-2011-3191</cve>
	<bugzilla href="https://bugzilla.suse.com/714001">SUSE bug 714001</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3192</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3192" ref_url="https://www.suse.com/security/cve/CVE-2011-3192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1000-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1215-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1216-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1229-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="TID7009308" ref_url="https://www.suse.com/support/kb/doc/?id=7009308" source="SUSE-SU"/>
		<reference ref_id="TID7009621" ref_url="https://www.suse.com/support/kb/doc/?id=7009621" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:0993-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1217-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00009.html" source="SUSE-SU"/>
    <description>
    The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3192/">CVE-2011-3192</cve>
	<bugzilla href="https://bugzilla.suse.com/713966">SUSE bug 713966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/714306">SUSE bug 714306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/716634">SUSE bug 716634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/718106">SUSE bug 718106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/722545">SUSE bug 722545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/726139">SUSE bug 726139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/732051">SUSE bug 732051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983778">SUSE bug 983778</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3193</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3193" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3193" ref_url="https://www.suse.com/security/cve/CVE-2011-3193" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1119-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1120-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00008.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3193/">CVE-2011-3193</cve>
	<bugzilla href="https://bugzilla.suse.com/714984">SUSE bug 714984</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113422" comment="qt4-x11-tools-4.8.6-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113432" comment="libqt4-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113420" comment="libqt4-devel-doc-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113421" comment="libqt4-devel-doc-data-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113433" comment="libqt4-linguist-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113434" comment="libqt4-private-headers-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125285" comment="libqt4-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125286" comment="libqt4-devel-doc-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125287" comment="libqt4-devel-doc-data-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125288" comment="libqt4-linguist-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125289" comment="libqt4-private-headers-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141612" comment="libqt4-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141614" comment="libqt4-qt3support-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141616" comment="libqt4-sql-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141622" comment="libqt4-sql-sqlite-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141626" comment="libqt4-x11-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143250" comment="libqt4-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143251" comment="libqt4-qt3support-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143252" comment="libqt4-sql-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143253" comment="libqt4-sql-sqlite-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143254" comment="libqt4-x11-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143255" comment="qt4-x11-tools-4.8.6-2.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144917" comment="libqt4-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144918" comment="libqt4-devel-doc-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144919" comment="libqt4-devel-doc-data-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144920" comment="libqt4-linguist-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144921" comment="libqt4-private-headers-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513220" comment="qt4-x11-tools-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513819" comment="libqt4-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513820" comment="libqt4-devel-doc-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513821" comment="libqt4-devel-doc-data-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513822" comment="libqt4-linguist-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513823" comment="libqt4-private-headers-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3200</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3200" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3200" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3200" ref_url="https://www.suse.com/security/cve/CVE-2011-3200" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1020-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00013.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service (application exit) via a long TAG in a legacy syslog message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3200/">CVE-2011-3200</cve>
	<bugzilla href="https://bugzilla.suse.com/714658">SUSE bug 714658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141112" comment="rsyslog-8.4.0-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141802" comment="rsyslog-8.4.0-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142058" comment="rsyslog-8.4.0-8.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159295" comment="rsyslog-8.24.0-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512617" comment="rsyslog-8.24.0-3.16.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141112" comment="rsyslog-8.4.0-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141113" comment="rsyslog-diag-tools-8.4.0-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141114" comment="rsyslog-doc-8.4.0-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141115" comment="rsyslog-module-gssapi-8.4.0-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141116" comment="rsyslog-module-gtls-8.4.0-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141117" comment="rsyslog-module-mysql-8.4.0-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141118" comment="rsyslog-module-pgsql-8.4.0-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141119" comment="rsyslog-module-relp-8.4.0-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141120" comment="rsyslog-module-snmp-8.4.0-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141121" comment="rsyslog-module-udpspoof-8.4.0-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141802" comment="rsyslog-8.4.0-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143286" comment="rsyslog-diag-tools-8.4.0-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143287" comment="rsyslog-doc-8.4.0-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143288" comment="rsyslog-module-gssapi-8.4.0-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143289" comment="rsyslog-module-gtls-8.4.0-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143290" comment="rsyslog-module-mysql-8.4.0-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143291" comment="rsyslog-module-pgsql-8.4.0-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143292" comment="rsyslog-module-relp-8.4.0-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143293" comment="rsyslog-module-snmp-8.4.0-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143294" comment="rsyslog-module-udpspoof-8.4.0-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142058" comment="rsyslog-8.4.0-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143386" comment="rsyslog-diag-tools-8.4.0-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143387" comment="rsyslog-doc-8.4.0-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143388" comment="rsyslog-module-gssapi-8.4.0-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143389" comment="rsyslog-module-gtls-8.4.0-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143390" comment="rsyslog-module-mysql-8.4.0-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143391" comment="rsyslog-module-pgsql-8.4.0-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143392" comment="rsyslog-module-relp-8.4.0-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143393" comment="rsyslog-module-snmp-8.4.0-8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143394" comment="rsyslog-module-udpspoof-8.4.0-8.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159295" comment="rsyslog-8.24.0-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159296" comment="rsyslog-diag-tools-8.24.0-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159297" comment="rsyslog-doc-8.24.0-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159298" comment="rsyslog-module-gssapi-8.24.0-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159299" comment="rsyslog-module-gtls-8.24.0-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159300" comment="rsyslog-module-mysql-8.24.0-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159301" comment="rsyslog-module-pgsql-8.24.0-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159302" comment="rsyslog-module-relp-8.24.0-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159303" comment="rsyslog-module-snmp-8.24.0-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159304" comment="rsyslog-module-udpspoof-8.24.0-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512617" comment="rsyslog-8.24.0-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513583" comment="rsyslog-diag-tools-8.24.0-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513584" comment="rsyslog-doc-8.24.0-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513585" comment="rsyslog-module-gssapi-8.24.0-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513586" comment="rsyslog-module-gtls-8.24.0-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513587" comment="rsyslog-module-mysql-8.24.0-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513588" comment="rsyslog-module-pgsql-8.24.0-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513589" comment="rsyslog-module-relp-8.24.0-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513590" comment="rsyslog-module-snmp-8.24.0-3.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513591" comment="rsyslog-module-udpspoof-8.24.0-3.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513400" comment="rsyslog-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513401" comment="rsyslog-diag-tools-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513402" comment="rsyslog-doc-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513403" comment="rsyslog-module-gssapi-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513404" comment="rsyslog-module-gtls-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513405" comment="rsyslog-module-mmnormalize-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513406" comment="rsyslog-module-mysql-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513407" comment="rsyslog-module-pgsql-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513408" comment="rsyslog-module-relp-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513409" comment="rsyslog-module-snmp-8.24.0-3.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513410" comment="rsyslog-module-udpspoof-8.24.0-3.28.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3207</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3207" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3207" ref_url="https://www.suse.com/security/cve/CVE-2011-3207" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1144-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00018.html" source="SUSE-SU"/>
    <description>
    crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3207/">CVE-2011-3207</cve>
	<bugzilla href="https://bugzilla.suse.com/716143">SUSE bug 716143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3210</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3210" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3210" ref_url="https://www.suse.com/security/cve/CVE-2011-3210" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1144-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00018.html" source="SUSE-SU"/>
    <description>
    The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3210/">CVE-2011-3210</cve>
	<bugzilla href="https://bugzilla.suse.com/716144">SUSE bug 716144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3232</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3232" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3232" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3232" ref_url="https://www.suse.com/security/cve/CVE-2011-3232" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1077-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-09/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3232/">CVE-2011-3232</cve>
	<bugzilla href="https://bugzilla.suse.com/720264">SUSE bug 720264</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3256</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3256" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3256" ref_url="https://www.suse.com/security/cve/CVE-2011-3256" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0047-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html" source="SUSE-SU"/>
    <description>
    FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3256/">CVE-2011-3256</cve>
	<bugzilla href="https://bugzilla.suse.com/728044">SUSE bug 728044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/730124">SUSE bug 730124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/748083">SUSE bug 748083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3266</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3266" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3266" ref_url="https://www.suse.com/security/cve/CVE-2011-3266" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00022.html" source="SUSE-SU"/>
    <description>
    The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3266/">CVE-2011-3266</cve>
	<bugzilla href="https://bugzilla.suse.com/718032">SUSE bug 718032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3328</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3328" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3328" ref_url="https://www.suse.com/security/cve/CVE-2011-3328" source="SUSE CVE"/>
    <description>
    The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed PNG image containing a cHRM chunk associated with a certain zero value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3328/">CVE-2011-3328</cve>
	<bugzilla href="https://bugzilla.suse.com/720017">SUSE bug 720017</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009105440" comment="libpng16-compat-devel-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105442" comment="libpng16-devel-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119225" comment="libpng16-16-32bit-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119224" comment="libpng16-16-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119236" comment="libpng16-compat-devel-1.6.8-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119237" comment="libpng16-devel-1.6.8-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141585" comment="libpng16-16-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141586" comment="libpng16-16-32bit-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105438" comment="libpng16-16-1.6.8-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105439" comment="libpng16-16-32bit-1.6.8-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144909" comment="libpng16-compat-devel-1.6.8-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144910" comment="libpng16-devel-1.6.8-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150210" comment="libpng16-compat-devel-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150211" comment="libpng16-devel-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149948" comment="libpng16-16-1.6.8-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149949" comment="libpng16-16-32bit-1.6.8-14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3351</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3351" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3351" ref_url="https://www.suse.com/security/cve/CVE-2011-3351" source="SUSE CVE"/>
    <description>
    openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3351/">CVE-2011-3351</cve>
	<bugzilla href="https://bugzilla.suse.com/716367">SUSE bug 716367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338830" comment="openvas-scanner is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338831" comment="openvas-scanner-doc is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3353</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3353" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3353" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3353" ref_url="https://www.suse.com/security/cve/CVE-2011-3353" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:041" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1101-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-3353/">CVE-2011-3353</cve>
	<bugzilla href="https://bugzilla.suse.com/716901">SUSE bug 716901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113359" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3359</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3359" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3359" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3359" ref_url="https://www.suse.com/security/cve/CVE-2011-3359" source="SUSE CVE"/>
    <description>
    The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-3359/">CVE-2011-3359</cve>
	<bugzilla href="https://bugzilla.suse.com/717749">SUSE bug 717749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113360" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3360</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3360" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3360" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3360" ref_url="https://www.suse.com/security/cve/CVE-2011-3360" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3360/">CVE-2011-3360</cve>
	<bugzilla href="https://bugzilla.suse.com/718032">SUSE bug 718032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3363</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3363" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3363" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3363" ref_url="https://www.suse.com/security/cve/CVE-2011-3363" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:042" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1195-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1221-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1222-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00007.html" source="SUSE-SU"/>
    <description>
    The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-3363/">CVE-2011-3363</cve>
	<bugzilla href="https://bugzilla.suse.com/718028">SUSE bug 718028</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3368</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3368" ref_url="https://www.suse.com/security/cve/CVE-2011-3368" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0248-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3368/">CVE-2011-3368</cve>
	<bugzilla href="https://bugzilla.suse.com/722545">SUSE bug 722545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/723308">SUSE bug 723308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/728876">SUSE bug 728876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729181">SUSE bug 729181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754831">SUSE bug 754831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791794">SUSE bug 791794</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3372</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3372" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3372" ref_url="https://www.suse.com/security/cve/CVE-2011-3372" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1170-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00026.html" source="SUSE-SU"/>
    <description>
    imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3372/">CVE-2011-3372</cve>
	<bugzilla href="https://bugzilla.suse.com/719998">SUSE bug 719998</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143271" comment="perl-Cyrus-IMAP-2.3.18-35.71 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143272" comment="perl-Cyrus-SIEVE-managesieve-2.3.18-35.71 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3377</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3377" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3377" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3377" ref_url="https://www.suse.com/security/cve/CVE-2011-3377" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00028.html" source="SUSE-SU"/>
    <description>
    The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a different sub-domain than the targeted domain.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3377/">CVE-2011-3377</cve>
	<bugzilla href="https://bugzilla.suse.com/729870">SUSE bug 729870</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141421" comment="java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114769" comment="java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141887" comment="java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159646" comment="java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159647" comment="java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3379</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3379" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3379" ref_url="https://www.suse.com/security/cve/CVE-2011-3379" source="SUSE CVE"/>
    <description>
    The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3379/">CVE-2011-3379</cve>
	<bugzilla href="https://bugzilla.suse.com/728350">SUSE bug 728350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3389</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3389" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0114-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0114-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0122-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000519.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="TID3426981" ref_url="https://www.suse.com/support/kb/doc/?id=3426981" source="SUSE-SU"/>
		<reference ref_id="TID7001524" ref_url="https://www.suse.com/support/kb/doc/?id=7001524" source="SUSE-SU"/>
		<reference ref_id="TID7009901" ref_url="https://www.suse.com/support/kb/doc/?id=7009901" source="SUSE-SU"/>
		<reference ref_id="TID7015841" ref_url="https://www.suse.com/support/kb/doc/?id=7015841" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7022397" ref_url="https://www.suse.com/support/kb/doc/?id=7022397" source="SUSE-SU"/>
		<reference ref_id="TID7022454" ref_url="https://www.suse.com/support/kb/doc/?id=7022454" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1025-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1196-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0063-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0229-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0667-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<bugzilla href="https://bugzilla.suse.com/716002">SUSE bug 716002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/719047">SUSE bug 719047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725167">SUSE bug 725167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/726096">SUSE bug 726096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/739248">SUSE bug 739248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/739256">SUSE bug 739256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742306">SUSE bug 742306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751718">SUSE bug 751718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/759666">SUSE bug 759666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763598">SUSE bug 763598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/814655">SUSE bug 814655</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116031" comment="mozilla-nss-devel-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129306" comment="mozilla-nss-devel-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140570" comment="fetchmailconf-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129313" comment="libfreebl3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129315" comment="libsoftokn3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131910" comment="python-base-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140570" comment="fetchmailconf-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140570" comment="fetchmailconf-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155339" comment="libfreebl3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155342" comment="libfreebl3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155340" comment="libsoftokn3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155343" comment="libsoftokn3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159189" comment="python-base-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140570" comment="fetchmailconf-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513535" comment="libfreebl3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513536" comment="libfreebl3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513537" comment="libsoftokn3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513538" comment="libsoftokn3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513548" comment="python-base-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140570" comment="fetchmailconf-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513097" comment="libfreebl3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513098" comment="libfreebl3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513099" comment="libfreebl3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513100" comment="libfreebl3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513207" comment="libpython2_7-1_0-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513208" comment="libpython2_7-1_0-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513213" comment="libpython3_4m1_0-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513214" comment="libpython3_4m1_0-32bit-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513216" comment="libpython3_6m1_0-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513101" comment="libsoftokn3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513102" comment="libsoftokn3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513103" comment="libsoftokn3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513104" comment="libsoftokn3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513105" comment="mozilla-nss-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513106" comment="mozilla-nss-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513107" comment="mozilla-nss-certs-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513108" comment="mozilla-nss-certs-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513109" comment="mozilla-nss-sysinit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513110" comment="mozilla-nss-sysinit-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513111" comment="mozilla-nss-tools-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513209" comment="python-base-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513210" comment="python-base-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513212" comment="python-xml-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513215" comment="python3-base-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513217" comment="python36-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513218" comment="python36-base-3.6.8-2.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150270" comment="fetchmailconf-6.3.26-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116020" comment="libfreebl3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116021" comment="libfreebl3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116024" comment="libsoftokn3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116025" comment="libsoftokn3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143365" comment="python-base-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143172" comment="fetchmail-6.3.26-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143173" comment="fetchmailconf-6.3.26-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143227" comment="libfreebl3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143228" comment="libfreebl3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143229" comment="libsoftokn3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143230" comment="libsoftokn3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143249" comment="python-base-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144970" comment="mozilla-nss-devel-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144986" comment="python3-devel-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155345" comment="mozilla-nss-devel-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159835" comment="python3-devel-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513857" comment="mozilla-nss-devel-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513875" comment="python3-devel-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514218" comment="mozilla-nss-devel-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514245" comment="python3-devel-3.4.6-25.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009557648" comment="libpython3_6m1_0-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557649" comment="python36-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557650" comment="python36-base-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557651" comment="python36-curses-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557652" comment="python36-dbm-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557653" comment="python36-devel-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557654" comment="python36-doc-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557655" comment="python36-testsuite-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557656" comment="python36-tk-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557657" comment="python36-tools-3.6.8-6.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3439</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3439" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3439" ref_url="https://www.suse.com/security/cve/CVE-2011-3439" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1306-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1307-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0015-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0047-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html" source="SUSE-SU"/>
    <description>
    FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3439/">CVE-2011-3439</cve>
	<bugzilla href="https://bugzilla.suse.com/730124">SUSE bug 730124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/748083">SUSE bug 748083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3464</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3464" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3464" ref_url="https://www.suse.com/security/cve/CVE-2011-3464" source="SUSE CVE"/>
    <description>
    Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3464/">CVE-2011-3464</cve>
	<bugzilla href="https://bugzilla.suse.com/745029">SUSE bug 745029</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3483</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3483" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3483" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3483" ref_url="https://www.suse.com/security/cve/CVE-2011-3483" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1142-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff, related to a "buffer exception handling vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3483/">CVE-2011-3483</cve>
	<bugzilla href="https://bugzilla.suse.com/718032">SUSE bug 718032</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3563</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3563" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3563" ref_url="https://www.suse.com/security/cve/CVE-2011-3563" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3563/">CVE-2011-3563</cve>
	<bugzilla href="https://bugzilla.suse.com/747208">SUSE bug 747208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758470">SUSE bug 758470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763805">SUSE bug 763805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3571</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3571" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3571" ref_url="https://www.suse.com/security/cve/CVE-2011-3571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1323-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00041.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session.  NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3571/">CVE-2011-3571</cve>
	<bugzilla href="https://bugzilla.suse.com/742115">SUSE bug 742115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747208">SUSE bug 747208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3585</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Availability Extension 12 SP5</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3585" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3585" ref_url="https://www.suse.com/security/cve/CVE-2011-3585" source="SUSE CVE"/>
    <description>
    Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-13"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-3585/">CVE-2011-3585</cve>
	<bugzilla href="https://bugzilla.suse.com/1160791">SUSE bug 1160791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/721973">SUSE bug 721973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-ha:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125858" comment="SUSE Linux Enterprise High Availability Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135880" comment="SUSE Linux Enterprise High Availability Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159727" comment="SUSE Linux Enterprise High Availability Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240272" comment="SUSE Linux Enterprise High Availability Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009273143" comment="SUSE Linux Enterprise High Availability Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336017" comment="ctdb is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334846" comment="libsamba-errors0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335571" comment="libsamba-errors0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334965" comment="libsmbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334853" comment="libsmbldap0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334967" comment="libsmbldap0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334979" comment="libdcerpc-atsvc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334846" comment="libsamba-errors0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335571" comment="libsamba-errors0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334965" comment="libsmbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334853" comment="libsmbldap0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334967" comment="libsmbldap0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334984" comment="libndr-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334985" comment="libndr-krb5pac-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334986" comment="libndr-nbt-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334987" comment="libndr-standard-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334995" comment="libsamba-util-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334997" comment="libsmbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335004" comment="libwbclient-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335005" comment="samba-core-devel is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334993" comment="libsamba-policy-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341005" comment="libsamba-policy-python3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337106" comment="samba-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664362" comment="samba-devel-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336017" comment="ctdb is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334838" comment="libdcerpc-binding0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334951" comment="libdcerpc-binding0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334839" comment="libdcerpc0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334952" comment="libdcerpc0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334974" comment="libgensec0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334953" comment="libgensec0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334840" comment="libndr-krb5pac0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334954" comment="libndr-krb5pac0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334841" comment="libndr-nbt0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334955" comment="libndr-nbt0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334842" comment="libndr-standard0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334956" comment="libndr-standard0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334843" comment="libndr0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334957" comment="libndr0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334844" comment="libnetapi0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334958" comment="libnetapi0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334975" comment="libregistry0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334845" comment="libsamba-credentials0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334960" comment="libsamba-credentials0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334847" comment="libsamba-hostconfig0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334961" comment="libsamba-hostconfig0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334848" comment="libsamba-passdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334959" comment="libsamba-passdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334849" comment="libsamba-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334962" comment="libsamba-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334850" comment="libsamdb0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334963" comment="libsamdb0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334976" comment="libsmbclient-raw0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334964" comment="libsmbclient-raw0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334851" comment="libsmbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334965" comment="libsmbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334852" comment="libsmbconf0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334966" comment="libsmbconf0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334853" comment="libsmbldap0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334967" comment="libsmbldap0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334854" comment="libtevent-util0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334968" comment="libtevent-util0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334855" comment="libwbclient0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334969" comment="libwbclient0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334970" comment="samba-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334973" comment="samba-winbind-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009341005" comment="libsamba-policy-python3-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341006" comment="libsamba-policy0-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664706" comment="libsamba-policy0-python3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333940" comment="samba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334856" comment="samba-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334971" comment="samba-client-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664360" comment="samba-client-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664361" comment="samba-client-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337106" comment="samba-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334857" comment="samba-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654606" comment="samba-ldb-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334858" comment="samba-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334972" comment="samba-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338828" comment="samba-libs-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338829" comment="samba-libs-python3-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341011" comment="samba-python3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664363" comment="samba-tool is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334859" comment="samba-winbind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664364" comment="samba-winbind-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009664365" comment="samba-winbind-libs-32bit is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3593</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3593" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3593" ref_url="https://www.suse.com/security/cve/CVE-2011-3593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    A certain Red Hat patch to the vlan_hwaccel_do_receive function in net/8021q/vlan_core.c in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows remote attackers to cause a denial of service (system crash) via priority-tagged VLAN frames.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3593/">CVE-2011-3593</cve>
	<bugzilla href="https://bugzilla.suse.com/735347">SUSE bug 735347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3594</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3594" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3594" ref_url="https://www.suse.com/security/cve/CVE-2011-3594" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1291-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-12/msg00001.html" source="SUSE-SU"/>
    <description>
    The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service (crash) via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, related to interactions with certain versions of glib2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3594/">CVE-2011-3594</cve>
	<bugzilla href="https://bugzilla.suse.com/722199">SUSE bug 722199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736161">SUSE bug 736161</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3602</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3602" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3602" ref_url="https://www.suse.com/security/cve/CVE-2011-3602" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00016.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name. NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3602/">CVE-2011-3602</cve>
	<bugzilla href="https://bugzilla.suse.com/721968">SUSE bug 721968</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141103" comment="radvd-1.9.7-2.17 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147609" comment="radvd-1.9.7-2.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3607</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3607" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3607" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3607" ref_url="https://www.suse.com/security/cve/CVE-2011-3607" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0248-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00044.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3607/">CVE-2011-3607</cve>
	<bugzilla href="https://bugzilla.suse.com/728876">SUSE bug 728876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729181">SUSE bug 729181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729183">SUSE bug 729183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806721">SUSE bug 806721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3619</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3619" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3619" ref_url="https://www.suse.com/security/cve/CVE-2011-3619" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle invalid parameters, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by writing to a /proc/#####/attr/current file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-25"/>
	<updated date="2023-02-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3619/">CVE-2011-3619</cve>
	<bugzilla href="https://bugzilla.suse.com/717209">SUSE bug 717209</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3627</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3627" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3627" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3627" ref_url="https://www.suse.com/security/cve/CVE-2011-3627" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1177-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00030.html" source="SUSE-SU"/>
    <description>
    The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3627/">CVE-2011-3627</cve>
	<bugzilla href="https://bugzilla.suse.com/724856">SUSE bug 724856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809945">SUSE bug 809945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009109618" comment="clamav-0.98.7-13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140489" comment="clamav-0.99.2-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141235" comment="clamav-0.98.4-1.46 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157660" comment="clamav-0.99.2-32.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512064" comment="clamav-0.100.2-33.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512760" comment="clamav-0.101.3-1.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3630</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3630" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3630" ref_url="https://www.suse.com/security/cve/CVE-2011-3630" source="SUSE CVE"/>
    <description>
    Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink executable crash, or, potentially arbitrary code execution with the privileges of the user running the hardlink executable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3630/">CVE-2011-3630</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140678" comment="hardlink-1.0-6.45 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147534" comment="hardlink-1.0-6.38 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3631</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3631" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3631" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3631" ref_url="https://www.suse.com/security/cve/CVE-2011-3631" source="SUSE CVE"/>
    <description>
    Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it, leading to hardlink executable crash or potentially arbitrary code execution with user privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3631/">CVE-2011-3631</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140678" comment="hardlink-1.0-6.45 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147534" comment="hardlink-1.0-6.38 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3632</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3632" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3632" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3632" ref_url="https://www.suse.com/security/cve/CVE-2011-3632" source="SUSE CVE"/>
    <description>
    Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-3632/">CVE-2011-3632</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140678" comment="hardlink-1.0-6.45 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147534" comment="hardlink-1.0-6.38 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3635</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3635" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3635" ref_url="https://www.suse.com/security/cve/CVE-2011-3635" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1257-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00021.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3635/">CVE-2011-3635</cve>
	<bugzilla href="https://bugzilla.suse.com/727003">SUSE bug 727003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141316" comment="empathy-3.10.3-1.131 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141317" comment="empathy-lang-3.10.3-1.131 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141318" comment="telepathy-mission-control-plugin-goa-3.10.3-1.131 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142089" comment="empathy-3.12.12-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142090" comment="empathy-lang-3.12.12-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142091" comment="telepathy-mission-control-plugin-goa-3.12.12-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159630" comment="empathy-3.12.12-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159631" comment="empathy-lang-3.12.12-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159632" comment="telepathy-mission-control-plugin-goa-3.12.12-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512118" comment="empathy-3.12.13-8.3.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512119" comment="empathy-lang-3.12.13-8.3.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512120" comment="telepathy-mission-control-plugin-goa-3.12.13-8.3.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514272" comment="empathy-3.12.14-8.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514273" comment="empathy-lang-3.12.14-8.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514274" comment="telepathy-mission-control-plugin-goa-3.12.14-8.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3638</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3638" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3638" ref_url="https://www.suse.com/security/cve/CVE-2011-3638" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting, which allows local users to cause a denial of service (system crash) via vectors involving ext4 umount and mount operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3638/">CVE-2011-3638</cve>
	<bugzilla href="https://bugzilla.suse.com/726045">SUSE bug 726045</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3640</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3640" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3640" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3640" ref_url="https://www.suse.com/security/cve/CVE-2011-3640" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1241-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0030-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0063-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00021.html" source="SUSE-SU"/>
    <description>
    ** DISPUTED ** Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-19"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3640/">CVE-2011-3640</cve>
	<bugzilla href="https://bugzilla.suse.com/726096">SUSE bug 726096</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116031" comment="mozilla-nss-devel-3.19.2.1-29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129306" comment="mozilla-nss-devel-3.21.1-46.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144970" comment="mozilla-nss-devel-3.16.4-5.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155345" comment="mozilla-nss-devel-3.29.5-57.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513857" comment="mozilla-nss-devel-3.29.5-58.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514218" comment="mozilla-nss-devel-3.45-58.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116020" comment="libfreebl3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116021" comment="libfreebl3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116024" comment="libsoftokn3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116025" comment="libsoftokn3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129313" comment="libfreebl3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129315" comment="libsoftokn3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143227" comment="libfreebl3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143228" comment="libfreebl3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143229" comment="libsoftokn3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143230" comment="libsoftokn3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155339" comment="libfreebl3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155342" comment="libfreebl3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155340" comment="libsoftokn3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155343" comment="libsoftokn3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513535" comment="libfreebl3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513536" comment="libfreebl3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513537" comment="libsoftokn3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513538" comment="libsoftokn3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513097" comment="libfreebl3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513098" comment="libfreebl3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513099" comment="libfreebl3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513100" comment="libfreebl3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513101" comment="libsoftokn3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513102" comment="libsoftokn3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513103" comment="libsoftokn3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513104" comment="libsoftokn3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513105" comment="mozilla-nss-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513106" comment="mozilla-nss-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513107" comment="mozilla-nss-certs-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513108" comment="mozilla-nss-certs-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513109" comment="mozilla-nss-sysinit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513110" comment="mozilla-nss-sysinit-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513111" comment="mozilla-nss-tools-3.45-58.31.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3648</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3648" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3648" ref_url="https://www.suse.com/security/cve/CVE-2011-3648" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or HTML via crafted text with Shift JIS encoding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3648/">CVE-2011-3648</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3650</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3650" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3650" ref_url="https://www.suse.com/security/cve/CVE-2011-3650" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1266-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1242-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3650/">CVE-2011-3650</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3651</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3651" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3651" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3651" ref_url="https://www.suse.com/security/cve/CVE-2011-3651" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3651/">CVE-2011-3651</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3652</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3652" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3652" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3652" ref_url="https://www.suse.com/security/cve/CVE-2011-3652" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3652/">CVE-2011-3652</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3654</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3654" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3654" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3654" ref_url="https://www.suse.com/security/cve/CVE-2011-3654" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3654/">CVE-2011-3654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3655</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3655" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3655" ref_url="https://www.suse.com/security/cve/CVE-2011-3655" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1256-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1256-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1243-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1290-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3655/">CVE-2011-3655</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3658</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3658" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3658" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3658" ref_url="https://www.suse.com/security/cve/CVE-2011-3658" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3658/">CVE-2011-3658</cve>
	<bugzilla href="https://bugzilla.suse.com/737533">SUSE bug 737533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3659</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3659" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3659" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3659" ref_url="https://www.suse.com/security/cve/CVE-2011-3659" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3659/">CVE-2011-3659</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3660</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3660" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3660" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3660" ref_url="https://www.suse.com/security/cve/CVE-2011-3660" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3660/">CVE-2011-3660</cve>
	<bugzilla href="https://bugzilla.suse.com/737533">SUSE bug 737533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3661</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3661" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3661" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3661" ref_url="https://www.suse.com/security/cve/CVE-2011-3661" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3661/">CVE-2011-3661</cve>
	<bugzilla href="https://bugzilla.suse.com/737533">SUSE bug 737533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3663</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3663" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3663" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3663" ref_url="https://www.suse.com/security/cve/CVE-2011-3663" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0007-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0039-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3663/">CVE-2011-3663</cve>
	<bugzilla href="https://bugzilla.suse.com/737533">SUSE bug 737533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3848</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Advanced Systems Management 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3848" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3848" ref_url="https://www.suse.com/security/cve/CVE-2011-3848" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1190-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-10/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write X.509 Certificate Signing Request (CSR) to arbitrary locations via (1) a double-encoded key parameter in the URI in 2.7.x, (2) the CN in the Subject of a CSR in 2.6 and 0.25.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3848/">CVE-2011-3848</cve>
	<bugzilla href="https://bugzilla.suse.com/721139">SUSE bug 721139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/726372">SUSE bug 726372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-adv-systems-management:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142149" comment="puppet-3.8.5-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159708" comment="puppet-3.8.5-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172606" comment="puppet-3.8.5-15.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147499" comment="SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147500" comment="puppet-server-3.6.2-3.62 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113872" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3872</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Advanced Systems Management 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3872" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3872" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3872" ref_url="https://www.suse.com/security/cve/CVE-2011-3872" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-11/msg00027.html" source="SUSE-SU"/>
    <description>
    Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof a Puppet master via a man-in-the-middle (MITM) attack against an agent that uses an alternate DNS name for the master, aka "AltNames Vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3872/">CVE-2011-3872</cve>
	<bugzilla href="https://bugzilla.suse.com/726372">SUSE bug 726372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-adv-systems-management:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142149" comment="puppet-3.8.5-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159708" comment="puppet-3.8.5-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172606" comment="puppet-3.8.5-15.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147499" comment="SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147500" comment="puppet-server-3.6.2-3.62 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3922</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-3922" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3922" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-3922" ref_url="https://www.suse.com/security/cve/CVE-2011-3922" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0097-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0091-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00021.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3922/">CVE-2011-3922</cve>
	<bugzilla href="https://bugzilla.suse.com/739904">SUSE bug 739904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/740493">SUSE bug 740493</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113422" comment="qt4-x11-tools-4.8.6-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113432" comment="libqt4-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113420" comment="libqt4-devel-doc-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113421" comment="libqt4-devel-doc-data-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113433" comment="libqt4-linguist-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113434" comment="libqt4-private-headers-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125285" comment="libqt4-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125286" comment="libqt4-devel-doc-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125287" comment="libqt4-devel-doc-data-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125288" comment="libqt4-linguist-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125289" comment="libqt4-private-headers-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141612" comment="libqt4-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141614" comment="libqt4-qt3support-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141616" comment="libqt4-sql-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141622" comment="libqt4-sql-sqlite-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141626" comment="libqt4-x11-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143250" comment="libqt4-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143251" comment="libqt4-qt3support-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143252" comment="libqt4-sql-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143253" comment="libqt4-sql-sqlite-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143254" comment="libqt4-x11-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143255" comment="qt4-x11-tools-4.8.6-2.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144917" comment="libqt4-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144918" comment="libqt4-devel-doc-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144919" comment="libqt4-devel-doc-data-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144920" comment="libqt4-linguist-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144921" comment="libqt4-private-headers-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513220" comment="qt4-x11-tools-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513819" comment="libqt4-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513820" comment="libqt4-devel-doc-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513821" comment="libqt4-devel-doc-data-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513822" comment="libqt4-linguist-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513823" comment="libqt4-private-headers-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4077</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4077" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4077" ref_url="https://www.suse.com/security/cve/CVE-2011-4077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0540-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4077/">CVE-2011-4077</cve>
	<bugzilla href="https://bugzilla.suse.com/726600">SUSE bug 726600</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4080</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4080" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4080" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4080" ref_url="https://www.suse.com/security/cve/CVE-2011-4080" source="SUSE CVE"/>
    <description>
    The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-4080/">CVE-2011-4080</cve>
	<bugzilla href="https://bugzilla.suse.com/726772">SUSE bug 726772</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4081</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4081" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4081" ref_url="https://www.suse.com/security/cve/CVE-2011-4081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
    <description>
    crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-4081/">CVE-2011-4081</cve>
	<bugzilla href="https://bugzilla.suse.com/726788">SUSE bug 726788</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4086</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4086" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4086" ref_url="https://www.suse.com/security/cve/CVE-2011-4086" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0540-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4 filesystem that was mounted with a journal.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4086/">CVE-2011-4086</cve>
	<bugzilla href="https://bugzilla.suse.com/745832">SUSE bug 745832</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4108</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4108" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4108" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4108" ref_url="https://www.suse.com/security/cve/CVE-2011-4108" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4108/">CVE-2011-4108</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742821">SUSE bug 742821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778825">SUSE bug 778825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4109</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4109" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4109" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4109" ref_url="https://www.suse.com/security/cve/CVE-2011-4109" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-4109/">CVE-2011-4109</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4110</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4110" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4110" ref_url="https://www.suse.com/security/cve/CVE-2011-4110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4110/">CVE-2011-4110</cve>
	<bugzilla href="https://bugzilla.suse.com/734056">SUSE bug 734056</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4116</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4116" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4116" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4116" ref_url="https://www.suse.com/security/cve/CVE-2011-4116" source="SUSE CVE"/>
    <description>
    _is_safe in the File::Temp module for Perl does not properly handle symlinks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2011-4116/">CVE-2011-4116</cve>
	<bugzilla href="https://bugzilla.suse.com/1165026">SUSE bug 1165026</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338832" comment="perl-File-Temp is affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4128</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4128" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4128" ref_url="https://www.suse.com/security/cve/CVE-2011-4128" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0120-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0215-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00018.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4128/">CVE-2011-4128</cve>
	<bugzilla href="https://bugzilla.suse.com/729486">SUSE bug 729486</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114254" comment="libgnutls-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114256" comment="libgnutls-openssl-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114260" comment="libgnutlsxx-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114261" comment="libgnutlsxx28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143200" comment="libgnutls-openssl27-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144859" comment="libgnutls-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144860" comment="libgnutls-openssl-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144861" comment="libgnutlsxx-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144862" comment="libgnutlsxx28-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159005" comment="libgnutls-openssl27-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159806" comment="libgnutls-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159807" comment="libgnutls-openssl-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159808" comment="libgnutlsxx-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159809" comment="libgnutlsxx28-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512898" comment="libgnutls-openssl27-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513726" comment="libgnutls-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513727" comment="libgnutls-openssl-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513728" comment="libgnutlsxx-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513729" comment="libgnutlsxx28-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4131</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4131" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4131" ref_url="https://www.suse.com/security/cve/CVE-2011-4131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4131/">CVE-2011-4131</cve>
	<bugzilla href="https://bugzilla.suse.com/730117">SUSE bug 730117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/762992">SUSE bug 762992</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4132</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4132" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4132" ref_url="https://www.suse.com/security/cve/CVE-2011-4132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
    <description>
    The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an "invalid log first block value."
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-4132/">CVE-2011-4132</cve>
	<bugzilla href="https://bugzilla.suse.com/730118">SUSE bug 730118</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4153</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4153" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4153" ref_url="https://www.suse.com/security/cve/CVE-2011-4153" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0472-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE-SU"/>
    <description>
    PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4153/">CVE-2011-4153</cve>
	<bugzilla href="https://bugzilla.suse.com/733590">SUSE bug 733590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736169">SUSE bug 736169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/738221">SUSE bug 738221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741520">SUSE bug 741520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741859">SUSE bug 741859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742273">SUSE bug 742273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742806">SUSE bug 742806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743308">SUSE bug 743308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/744966">SUSE bug 744966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746661">SUSE bug 746661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749111">SUSE bug 749111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4182" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4182" ref_url="https://www.suse.com/security/cve/CVE-2011-4182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0242-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00035.html" source="SUSE-SU"/>
    <description>
    Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-4182/">CVE-2011-4182</cve>
	<bugzilla href="https://bugzilla.suse.com/735394">SUSE bug 735394</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141132" comment="sysconfig-0.84.0-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141133" comment="sysconfig-netconfig-0.84.0-13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141811" comment="sysconfig-0.83.7-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141812" comment="sysconfig-netconfig-0.83.7-2.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142060" comment="sysconfig-0.83.8-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142061" comment="sysconfig-netconfig-0.83.8-7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4313</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4313" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4313" ref_url="https://www.suse.com/security/cve/CVE-2011-4313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1268-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1270-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1270-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1270-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1272-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-11/msg00029.html" source="SUSE-SU"/>
    <description>
    query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4313/">CVE-2011-4313</cve>
	<bugzilla href="https://bugzilla.suse.com/730995">SUSE bug 730995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/738156">SUSE bug 738156</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4317</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4317" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4317" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4317" ref_url="https://www.suse.com/security/cve/CVE-2011-4317" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0212-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0248-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html" source="SUSE-SU"/>
    <description>
    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4317/">CVE-2011-4317</cve>
	<bugzilla href="https://bugzilla.suse.com/722545">SUSE bug 722545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/728876">SUSE bug 728876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/729181">SUSE bug 729181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791794">SUSE bug 791794</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4324</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4324" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4324" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4324" ref_url="https://www.suse.com/security/cve/CVE-2011-4324" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
    <description>
    The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4324/">CVE-2011-4324</cve>
	<bugzilla href="https://bugzilla.suse.com/732613">SUSE bug 732613</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4326</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4326" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4326" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4326" ref_url="https://www.suse.com/security/cve/CVE-2011-4326" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0364-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4326/">CVE-2011-4326</cve>
	<bugzilla href="https://bugzilla.suse.com/732021">SUSE bug 732021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4330</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4330" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4330" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4330" ref_url="https://www.suse.com/security/cve/CVE-2011-4330" source="SUSE CVE"/>
		<reference ref_id="SUSE-SA:2011:046" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1319-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via an HFS image with a crafted len field.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4330/">CVE-2011-4330</cve>
	<bugzilla href="https://bugzilla.suse.com/731673">SUSE bug 731673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941447">SUSE bug 941447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4348</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4348" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4348" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4348" ref_url="https://www.suse.com/security/cve/CVE-2011-4348" source="SUSE CVE"/>
    <description>
    Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote attackers to cause a denial of service (system hang) via SCTP packets. NOTE: in some environments, this issue exists because of an incomplete fix for CVE-2011-2482.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4348/">CVE-2011-4348</cve>
	<bugzilla href="https://bugzilla.suse.com/750395">SUSE bug 750395</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4349</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4349" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4349" ref_url="https://www.suse.com/security/cve/CVE-2011-4349" source="SUSE CVE"/>
    <description>
    Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4349/">CVE-2011-4349</cve>
	<bugzilla href="https://bugzilla.suse.com/698250">SUSE bug 698250</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/732996">SUSE bug 732996</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140490" comment="colord-gtk-lang-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140491" comment="libcolord-gtk1-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140492" comment="libcolord2-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140493" comment="libcolord2-32bit-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140494" comment="libcolorhug2-1.3.3-10.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140490" comment="colord-gtk-lang-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140491" comment="libcolord-gtk1-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140492" comment="libcolord2-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140494" comment="libcolorhug2-1.3.3-10.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140490" comment="colord-gtk-lang-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140491" comment="libcolord-gtk1-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158945" comment="libcolord2-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158946" comment="libcolord2-32bit-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158947" comment="libcolorhug2-1.3.3-12.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141236" comment="colord-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141237" comment="colord-gtk-lang-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141238" comment="colord-lang-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141239" comment="libcolord-gtk1-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141240" comment="libcolord2-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141241" comment="libcolord2-32bit-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141242" comment="libcolorhug2-1.1.7-2.42 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141236" comment="colord-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141238" comment="colord-lang-1.1.7-2.42 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141237" comment="colord-gtk-lang-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141239" comment="libcolord-gtk1-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141240" comment="libcolord2-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141241" comment="libcolord2-32bit-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141242" comment="libcolorhug2-1.1.7-2.42 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141237" comment="colord-gtk-lang-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141239" comment="libcolord-gtk1-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141854" comment="libcolord2-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141855" comment="libcolord2-32bit-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141856" comment="libcolorhug2-1.1.7-5.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141852" comment="colord-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141237" comment="colord-gtk-lang-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141853" comment="colord-lang-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141239" comment="libcolord-gtk1-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141854" comment="libcolord2-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141855" comment="libcolord2-32bit-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141856" comment="libcolorhug2-1.1.7-5.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141852" comment="colord-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141853" comment="colord-lang-1.1.7-5.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142079" comment="colord-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140490" comment="colord-gtk-lang-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142080" comment="colord-lang-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140491" comment="libcolord-gtk1-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140492" comment="libcolord2-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140493" comment="libcolord2-32bit-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140494" comment="libcolorhug2-1.3.3-10.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142079" comment="colord-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142080" comment="colord-lang-1.3.3-10.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144817" comment="libcolord-devel-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144818" comment="libcolord-gtk-devel-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144819" comment="typelib-1_0-ColorHug-1_0-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144820" comment="typelib-1_0-Colord-1_0-1.1.7-2.42 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144821" comment="typelib-1_0-ColordGtk-1_0-0.1.25-3.113 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145091" comment="libcolord-devel-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144818" comment="libcolord-gtk-devel-0.1.25-3.113 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145092" comment="typelib-1_0-ColorHug-1_0-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145093" comment="typelib-1_0-Colord-1_0-1.1.7-5.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144821" comment="typelib-1_0-ColordGtk-1_0-0.1.25-3.113 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145289" comment="libcolord-devel-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145290" comment="libcolord-gtk-devel-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145291" comment="typelib-1_0-ColorHug-1_0-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145292" comment="typelib-1_0-Colord-1_0-1.3.3-10.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145293" comment="typelib-1_0-ColordGtk-1_0-0.1.26-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159627" comment="colord-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140490" comment="colord-gtk-lang-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159628" comment="colord-lang-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140491" comment="libcolord-gtk1-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158945" comment="libcolord2-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158946" comment="libcolord2-32bit-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158947" comment="libcolorhug2-1.3.3-12.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159627" comment="colord-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159628" comment="colord-lang-1.3.3-12.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159803" comment="libcolord-devel-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145290" comment="libcolord-gtk-devel-0.1.26-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159804" comment="typelib-1_0-ColorHug-1_0-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159805" comment="typelib-1_0-Colord-1_0-1.3.3-12.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145293" comment="typelib-1_0-ColordGtk-1_0-0.1.26-6.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4354</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4354" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4354" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4354" ref_url="https://www.suse.com/security/cve/CVE-2011-4354" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0768-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00011.html" source="SUSE-SU"/>
    <description>
    crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curves, which allows remote attackers to obtain the private key of a TLS server via multiple handshake attempts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4354/">CVE-2011-4354</cve>
	<bugzilla href="https://bugzilla.suse.com/733252">SUSE bug 733252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/808942">SUSE bug 808942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4355</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4355" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4355" ref_url="https://www.suse.com/security/cve/CVE-2011-4355" source="SUSE CVE"/>
    <description>
    GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4355/">CVE-2011-4355</cve>
	<bugzilla href="https://bugzilla.suse.com/733300">SUSE bug 733300</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009654019" comment="gdb is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4405</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4405" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4405" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4405" ref_url="https://www.suse.com/security/cve/CVE-2011-4405" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1331-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1331-2" ref_url="https://lists.opensuse.org/opensuse-updates/2012-01/msg00028.html" source="SUSE-SU"/>
    <description>
    The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4405/">CVE-2011-4405</cve>
	<bugzilla href="https://bugzilla.suse.com/733542">SUSE bug 733542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/735322">SUSE bug 735322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141076" comment="python-cupshelpers-1.5.7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141077" comment="system-config-printer-1.5.7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141078" comment="system-config-printer-common-1.5.7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141079" comment="system-config-printer-common-lang-1.5.7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141080" comment="system-config-printer-dbus-service-1.5.7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141081" comment="udev-configure-printer-1.5.7-7.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141781" comment="python-cupshelpers-1.4.5-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141782" comment="system-config-printer-1.4.5-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141783" comment="system-config-printer-common-1.4.5-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141784" comment="system-config-printer-common-lang-1.4.5-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141785" comment="system-config-printer-dbus-service-1.4.5-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141786" comment="udev-configure-printer-1.4.5-1.5 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4516</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4516" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4516" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4516" ref_url="https://www.suse.com/security/cve/CVE-2011-4516" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1317-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4516/">CVE-2011-4516</cve>
	<bugzilla href="https://bugzilla.suse.com/1006591">SUSE bug 1006591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725758">SUSE bug 725758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150816" comment="libjasper-devel-1.900.14-194.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177659" comment="libjasper-devel-1.900.14-195.8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514070" comment="libjasper-devel-1.900.14-195.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150812" comment="libjasper1-1.900.14-194.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150813" comment="libjasper1-32bit-1.900.14-194.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009177649" comment="libjasper1-1.900.14-195.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177650" comment="libjasper1-32bit-1.900.14-195.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335449" comment="libjasper1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335450" comment="libjasper1-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513138" comment="libjasper1-1.900.14-195.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513139" comment="libjasper1-32bit-1.900.14-195.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4517</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4517" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4517" ref_url="https://www.suse.com/security/cve/CVE-2011-4517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2011:1317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2011:1317-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2011:1328-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2011-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:2737-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html" source="SUSE-SU"/>
    <description>
    The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-07"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4517/">CVE-2011-4517</cve>
	<bugzilla href="https://bugzilla.suse.com/1006593">SUSE bug 1006593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/725758">SUSE bug 725758</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150816" comment="libjasper-devel-1.900.14-194.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177659" comment="libjasper-devel-1.900.14-195.8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334023" comment="jasper is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514070" comment="libjasper-devel-1.900.14-195.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150812" comment="libjasper1-1.900.14-194.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150813" comment="libjasper1-32bit-1.900.14-194.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009177649" comment="libjasper1-1.900.14-195.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177650" comment="libjasper1-32bit-1.900.14-195.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335446" comment="libjasper1 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335447" comment="libjasper1-32bit is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513138" comment="libjasper1-1.900.14-195.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513139" comment="libjasper1-32bit-1.900.14-195.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334023" comment="jasper is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513138" comment="libjasper1-1.900.14-195.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513139" comment="libjasper1-32bit-1.900.14-195.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4539</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4539" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4539" ref_url="https://www.suse.com/security/cve/CVE-2011-4539" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2011:1318-1" ref_url="https://lists.opensuse.org/opensuse-updates/2011-12/msg00006.html" source="SUSE-SU"/>
    <description>
    dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4539/">CVE-2011-4539</cve>
	<bugzilla href="https://bugzilla.suse.com/735610">SUSE bug 735610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741239">SUSE bug 741239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4566</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4566" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4566" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4566" ref_url="https://www.suse.com/security/cve/CVE-2011-4566" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4566/">CVE-2011-4566</cve>
	<bugzilla href="https://bugzilla.suse.com/733590">SUSE bug 733590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736169">SUSE bug 736169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/738221">SUSE bug 738221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741520">SUSE bug 741520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741859">SUSE bug 741859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742273">SUSE bug 742273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742806">SUSE bug 742806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743308">SUSE bug 743308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/744966">SUSE bug 744966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746661">SUSE bug 746661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749111">SUSE bug 749111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4576</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4576" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4576" ref_url="https://www.suse.com/security/cve/CVE-2011-4576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021400" ref_url="https://www.suse.com/support/kb/doc/?id=7021400" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021736" ref_url="https://www.suse.com/support/kb/doc/?id=7021736" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021991" ref_url="https://www.suse.com/support/kb/doc/?id=7021991" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4576/">CVE-2011-4576</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778825">SUSE bug 778825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4577</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4577" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4577" ref_url="https://www.suse.com/security/cve/CVE-2011-4577" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4577/">CVE-2011-4577</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4594</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4594" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4594" ref_url="https://www.suse.com/security/cve/CVE-2011-4594" source="SUSE CVE"/>
    <description>
    The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an incorrect pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-4594/">CVE-2011-4594</cve>
	<bugzilla href="https://bugzilla.suse.com/735810">SUSE bug 735810</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4600</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4600" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4600" ref_url="https://www.suse.com/security/cve/CVE-2011-4600" source="SUSE CVE"/>
    <description>
    The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-4600/">CVE-2011-4600</cve>
	<bugzilla href="https://bugzilla.suse.com/736082">SUSE bug 736082</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144947" comment="libvirt-devel-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145170" comment="libvirt-devel-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145337" comment="libvirt-devel-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159830" comment="libvirt-devel-3.3.0-4.28 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513838" comment="libvirt-devel-4.0.0-6.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514203" comment="libvirt-devel-5.1.0-11.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143259" comment="libvirt-lock-sanlock-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143366" comment="libvirt-lock-sanlock-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159245" comment="libvirt-lock-sanlock-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159246" comment="libvirt-nss-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513554" comment="libvirt-daemon-hooks-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513555" comment="libvirt-lock-sanlock-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513556" comment="libvirt-nss-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513265" comment="libvirt-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513266" comment="libvirt-admin-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513267" comment="libvirt-client-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513268" comment="libvirt-daemon-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513269" comment="libvirt-daemon-config-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513270" comment="libvirt-daemon-config-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513271" comment="libvirt-daemon-driver-interface-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513272" comment="libvirt-daemon-driver-libxl-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513273" comment="libvirt-daemon-driver-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513274" comment="libvirt-daemon-driver-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513275" comment="libvirt-daemon-driver-nodedev-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513276" comment="libvirt-daemon-driver-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513277" comment="libvirt-daemon-driver-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513278" comment="libvirt-daemon-driver-secret-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513279" comment="libvirt-daemon-driver-storage-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513280" comment="libvirt-daemon-driver-storage-core-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513281" comment="libvirt-daemon-driver-storage-disk-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513282" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513283" comment="libvirt-daemon-driver-storage-logical-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513284" comment="libvirt-daemon-driver-storage-mpath-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513285" comment="libvirt-daemon-driver-storage-rbd-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513286" comment="libvirt-daemon-driver-storage-scsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513287" comment="libvirt-daemon-hooks-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513288" comment="libvirt-daemon-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513289" comment="libvirt-daemon-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513290" comment="libvirt-daemon-xen-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513291" comment="libvirt-doc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513292" comment="libvirt-libs-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513293" comment="libvirt-lock-sanlock-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513294" comment="libvirt-nss-5.1.0-11.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114604" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4604</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4604" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4604" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4604" ref_url="https://www.suse.com/security/cve/CVE-2011-4604" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0206-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0236-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted batman-adv ICMP packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4604/">CVE-2011-4604</cve>
	<bugzilla href="https://bugzilla.suse.com/736149">SUSE bug 736149</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4611</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4611" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4611" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4611" ref_url="https://www.suse.com/security/cve/CVE-2011-4611" source="SUSE CVE"/>
    <description>
    Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service (unhandled performance monitor exception) via vectors that trigger certain outcomes of performance events.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4611/">CVE-2011-4611</cve>
	<bugzilla href="https://bugzilla.suse.com/744023">SUSE bug 744023</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4619</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4619" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4619" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4619" ref_url="https://www.suse.com/security/cve/CVE-2011-4619" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0084-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4619/">CVE-2011-4619</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/799454">SUSE bug 799454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334864" comment="libopenssl-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334863" comment="libopenssl1_0_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334862" comment="libopenssl1_0_0-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334868" comment="libopenssl1_0_0-hmac is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334870" comment="libopenssl1_0_0-hmac-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333942" comment="openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334869" comment="openssl-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4718</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4718" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4718" ref_url="https://www.suse.com/security/cve/CVE-2011-4718" source="SUSE CVE"/>
    <description>
    Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4718/">CVE-2011-4718</cve>
	<bugzilla href="https://bugzilla.suse.com/834813">SUSE bug 834813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4815</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4815" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4815" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4815" ref_url="https://www.suse.com/security/cve/CVE-2011-4815" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0147-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0228-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00024.html" source="SUSE-SU"/>
    <description>
    Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4815/">CVE-2011-4815</cve>
	<bugzilla href="https://bugzilla.suse.com/739122">SUSE bug 739122</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141123" comment="ruby-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144989" comment="ruby-devel-2.1-1.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147611" comment="ruby-2.1-1.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4862</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4862" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4862" ref_url="https://www.suse.com/security/cve/CVE-2011-4862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0010-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0018-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0050-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0019-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0051-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-4862/">CVE-2011-4862</cve>
	<bugzilla href="https://bugzilla.suse.com/738632">SUSE bug 738632</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140711" comment="krb5-appl-clients-1.0.3-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140711" comment="krb5-appl-clients-1.0.3-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140712" comment="krb5-appl-servers-1.0.3-1.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147538" comment="krb5-appl-clients-1.0.3-1.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147539" comment="krb5-appl-servers-1.0.3-1.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4868</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4868" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4868" ref_url="https://www.suse.com/security/cve/CVE-2011-4868" source="SUSE CVE"/>
    <description>
    The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4868/">CVE-2011-4868</cve>
	<bugzilla href="https://bugzilla.suse.com/741239">SUSE bug 741239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4885</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4885" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4885" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4885" ref_url="https://www.suse.com/security/cve/CVE-2011-4885" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE-SU"/>
    <description>
    PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-30"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4885/">CVE-2011-4885</cve>
	<bugzilla href="https://bugzilla.suse.com/733590">SUSE bug 733590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736169">SUSE bug 736169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/738221">SUSE bug 738221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741520">SUSE bug 741520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741859">SUSE bug 741859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742273">SUSE bug 742273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742806">SUSE bug 742806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743308">SUSE bug 743308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/744966">SUSE bug 744966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746661">SUSE bug 746661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749111">SUSE bug 749111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4915</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4915" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4915" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4915" ref_url="https://www.suse.com/security/cve/CVE-2011-4915" source="SUSE CVE"/>
    <description>
    fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /proc/interrupts.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-4915/">CVE-2011-4915</cve>
	<bugzilla href="https://bugzilla.suse.com/738749">SUSE bug 738749</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4944</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4944" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4944" ref_url="https://www.suse.com/security/cve/CVE-2011-4944" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0667-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-4944/">CVE-2011-4944</cve>
	<bugzilla href="https://bugzilla.suse.com/754447">SUSE bug 754447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514245" comment="python3-devel-3.4.6-25.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131910" comment="python-base-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143249" comment="python-base-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144986" comment="python3-devel-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143365" comment="python-base-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159189" comment="python-base-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159835" comment="python3-devel-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513548" comment="python-base-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513875" comment="python3-devel-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513207" comment="libpython2_7-1_0-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513208" comment="libpython2_7-1_0-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513213" comment="libpython3_4m1_0-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513214" comment="libpython3_4m1_0-32bit-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513216" comment="libpython3_6m1_0-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513209" comment="python-base-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513210" comment="python-base-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513212" comment="python-xml-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513215" comment="python3-base-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513217" comment="python36-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513218" comment="python36-base-3.6.8-2.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009557648" comment="libpython3_6m1_0-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557649" comment="python36-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557650" comment="python36-base-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557651" comment="python36-curses-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557652" comment="python36-dbm-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557653" comment="python36-devel-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557654" comment="python36-doc-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557655" comment="python36-testsuite-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557656" comment="python36-tk-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557657" comment="python36-tools-3.6.8-6.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4971</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-4971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4971" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-4971" ref_url="https://www.suse.com/security/cve/CVE-2011-4971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-05"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-4971/">CVE-2011-4971</cve>
	<bugzilla href="https://bugzilla.suse.com/817781">SUSE bug 817781</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159251" comment="memcached-1.4.33-3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174459" comment="memcached-1.4.39-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513855" comment="memcached-devel-1.4.39-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5000</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5000" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5000" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5000" ref_url="https://www.suse.com/security/cve/CVE-2011-5000" source="SUSE CVE"/>
		<reference ref_id="TID7022091" ref_url="https://www.suse.com/support/kb/doc/?id=7022091" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
    <description>
    The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field.  NOTE: there may be limited scenarios in which this issue is relevant.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-25"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-5000/">CVE-2011-5000</cve>
	<bugzilla href="https://bugzilla.suse.com/755505">SUSE bug 755505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/756370">SUSE bug 756370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826672">SUSE bug 826672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/881234">SUSE bug 881234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5035</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5035" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5035" ref_url="https://www.suse.com/security/cve/CVE-2011-5035" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket S0104869.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-5035/">CVE-2011-5035</cve>
	<bugzilla href="https://bugzilla.suse.com/747208">SUSE bug 747208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/757762">SUSE bug 757762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758470">SUSE bug 758470</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5095</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5095" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5095" ref_url="https://www.suse.com/security/cve/CVE-2011-5095" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0885-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000183.html" source="SUSE-SU"/>
    <description>
    The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-5095/">CVE-2011-5095</cve>
	<bugzilla href="https://bugzilla.suse.com/768097">SUSE bug 768097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/773908">SUSE bug 773908</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5321</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5321" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5321" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5321" ref_url="https://www.suse.com/security/cve/CVE-2011-5321" source="SUSE CVE"/>
    <description>
    The tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted access to a device file under the /dev/pts directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-01"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-5321/">CVE-2011-5321</cve>
	<bugzilla href="https://bugzilla.suse.com/922447">SUSE bug 922447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5325</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5325" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5325" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2022:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013166.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2022:65-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010088.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:0135-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010220.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:3959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012904.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2022:4253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013126.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:1408-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LTZHQ6OAWXY23IUCNO7X25C5CHHCWLOM/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2021:3531-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXGVAQ34C33F4R3O65TKB73FYUDCIM6B/" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:0135-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YB6DIPEMLRTDD3RU77DD7UYYKBEEKYDY/" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3-ltss</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338833" comment="busybox is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725901" comment="busybox-1.35.0-4.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009725996" comment="busybox-1.35.0-4.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS-TERADATA is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009726003" comment="busybox-1.35.0-4.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009727199" comment="busybox-1.35.0-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20115327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-5327</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2011-5327" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5327" source="CVE"/>
    <reference ref_id="SUSE CVE-2011-5327" ref_url="https://www.suse.com/security/cve/CVE-2011-5327" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm_loop.c tcm_loop_make_naa_tpg() function could result in at least memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-5327/">CVE-2011-5327</cve>
	<bugzilla href="https://bugzilla.suse.com/1143175">SUSE bug 1143175</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0021</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0021" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0021" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0021" ref_url="https://www.suse.com/security/cve/CVE-2012-0021" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000464.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2907-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-October/003365.html" source="SUSE-SU"/>
    <description>
    The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0021/">CVE-2012-0021</cve>
	<bugzilla href="https://bugzilla.suse.com/1078450">SUSE bug 1078450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743744">SUSE bug 743744</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0027</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0027" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0027" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0027" ref_url="https://www.suse.com/security/cve/CVE-2012-0027" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0083-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0027/">CVE-2012-0027</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0028</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0028" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0028" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0028" ref_url="https://www.suse.com/security/cve/CVE-2012-0028" source="SUSE CVE"/>
    <description>
    The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0028/">CVE-2012-0028</cve>
	<bugzilla href="https://bugzilla.suse.com/739721">SUSE bug 739721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0029</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0029" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0029" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0029" ref_url="https://www.suse.com/security/cve/CVE-2012-0029" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-January/000011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-March/000058.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0207-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0267-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00053.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0347-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0548-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00055.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0029/">CVE-2012-0029</cve>
	<bugzilla href="https://bugzilla.suse.com/740165">SUSE bug 740165</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747331">SUSE bug 747331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/757537">SUSE bug 757537</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0031</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0031" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0031" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0031" ref_url="https://www.suse.com/security/cve/CVE-2012-0031" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html" source="SUSE-SU"/>
    <description>
    scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0031/">CVE-2012-0031</cve>
	<bugzilla href="https://bugzilla.suse.com/741243">SUSE bug 741243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806721">SUSE bug 806721</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0035</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0035" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0035" ref_url="https://www.suse.com/security/cve/CVE-2012-0035" source="SUSE CVE"/>
    <description>
    Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0035/">CVE-2012-0035</cve>
	<bugzilla href="https://bugzilla.suse.com/740447">SUSE bug 740447</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140549" comment="emacs-24.3-16.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140550" comment="emacs-el-24.3-16.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140551" comment="emacs-info-24.3-16.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140552" comment="emacs-nox-24.3-16.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140553" comment="emacs-x11-24.3-16.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140554" comment="etags-24.3-16.32 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140549" comment="emacs-24.3-16.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140551" comment="emacs-info-24.3-16.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140553" comment="emacs-x11-24.3-16.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140554" comment="etags-24.3-16.32 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141312" comment="emacs-24.3-14.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141313" comment="emacs-info-24.3-14.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141314" comment="emacs-x11-24.3-14.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141315" comment="etags-24.3-14.44 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141312" comment="emacs-24.3-14.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143170" comment="emacs-el-24.3-14.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141313" comment="emacs-info-24.3-14.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143171" comment="emacs-nox-24.3-14.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141314" comment="emacs-x11-24.3-14.44 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141315" comment="etags-24.3-14.44 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158975" comment="emacs-24.3-19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158976" comment="emacs-el-24.3-19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158977" comment="emacs-info-24.3-19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158978" comment="emacs-nox-24.3-19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158979" comment="emacs-x11-24.3-19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158980" comment="etags-24.3-19.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158975" comment="emacs-24.3-19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158977" comment="emacs-info-24.3-19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158979" comment="emacs-x11-24.3-19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158980" comment="etags-24.3-19.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009164489" comment="emacs-24.3-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164490" comment="emacs-info-24.3-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164491" comment="emacs-x11-24.3-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164492" comment="etags-24.3-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009164489" comment="emacs-24.3-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164496" comment="emacs-el-24.3-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164490" comment="emacs-info-24.3-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164497" comment="emacs-nox-24.3-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164491" comment="emacs-x11-24.3-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164492" comment="etags-24.3-25.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0037</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0037" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0037" ref_url="https://www.suse.com/security/cve/CVE-2012-0037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-March/000062.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000074.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0428-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0433-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00052.html" source="SUSE-SU"/>
    <description>
    Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0037/">CVE-2012-0037</cve>
	<bugzilla href="https://bugzilla.suse.com/37195">SUSE bug 37195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/734781">SUSE bug 734781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/740453">SUSE bug 740453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/745298">SUSE bug 745298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140928" comment="libraptor2-0-2.0.10-3.67 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141628" comment="raptor-2.0.10-3.67 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147585" comment="libraptor2-0-2.0.10-3.63 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140928" comment="libraptor2-0-2.0.10-3.67 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141628" comment="raptor-2.0.10-3.67 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144922" comment="libraptor-devel-2.0.10-3.67 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141628" comment="raptor-2.0.10-3.67 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0038</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0038" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0038" ref_url="https://www.suse.com/security/cve/CVE-2012-0038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0153-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-19"/>
	<updated date="2023-02-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-0038/">CVE-2012-0038</cve>
	<bugzilla href="https://bugzilla.suse.com/740703">SUSE bug 740703</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0045</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0045" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0045" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0045" ref_url="https://www.suse.com/security/cve/CVE-2012-0045" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0045/">CVE-2012-0045</cve>
	<bugzilla href="https://bugzilla.suse.com/740969">SUSE bug 740969</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0050</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0050" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0050" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0050" ref_url="https://www.suse.com/security/cve/CVE-2012-0050" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0281-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0266-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0050/">CVE-2012-0050</cve>
	<bugzilla href="https://bugzilla.suse.com/739719">SUSE bug 739719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742821">SUSE bug 742821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0053</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0053" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0053" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0053" ref_url="https://www.suse.com/security/cve/CVE-2012-0053" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0314-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html" source="SUSE-SU"/>
    <description>
    protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0053/">CVE-2012-0053</cve>
	<bugzilla href="https://bugzilla.suse.com/743743">SUSE bug 743743</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0055</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0055" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0055" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0055" ref_url="https://www.suse.com/security/cve/CVE-2012-0055" source="SUSE CVE"/>
    <description>
    OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-0055/">CVE-2012-0055</cve>
	<bugzilla href="https://bugzilla.suse.com/742027">SUSE bug 742027</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0056</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0056" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0056" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0056" ref_url="https://www.suse.com/security/cve/CVE-2012-0056" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/&lt;pid&gt;/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0056/">CVE-2012-0056</cve>
	<bugzilla href="https://bugzilla.suse.com/1171985">SUSE bug 1171985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742028">SUSE bug 742028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742279">SUSE bug 742279</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0058</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0058" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0058" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0058" ref_url="https://www.suse.com/security/cve/CVE-2012-0058" source="SUSE CVE"/>
    <description>
    The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that trigger incorrect iocb management.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-07-10"/>
	<updated date="2023-07-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-0058/">CVE-2012-0058</cve>
	<bugzilla href="https://bugzilla.suse.com/742030">SUSE bug 742030</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0217</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0217" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0217" ref_url="https://www.suse.com/security/cve/CVE-2012-0217" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0730-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0886-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00008.html" source="SUSE-SU"/>
    <description>
    The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1; and possibly other operating systems, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application.  NOTE: because this issue is due to incorrect use of the Intel specification, it should have been split into separate identifiers; however, there was some value in preserving the original mapping of the multi-codebase coordinated-disclosure effort to a single identifier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0217/">CVE-2012-0217</cve>
	<bugzilla href="https://bugzilla.suse.com/757537">SUSE bug 757537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/764077">SUSE bug 764077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0247</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0247" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0247" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0247" ref_url="https://www.suse.com/security/cve/CVE-2012-0247" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000150.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0692-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE-SU"/>
    <description>
    ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-13"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-0247/">CVE-2012-0247</cve>
	<bugzilla href="https://bugzilla.suse.com/746880">SUSE bug 746880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752879">SUSE bug 752879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102630" comment="ImageMagick-devel-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102636" comment="libMagick++-devel-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102641" comment="perl-PerlMagick-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102637" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102638" comment="libMagickCore-6_Q16-1-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102637" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102640" comment="libMagickWand-6_Q16-1-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102638" comment="libMagickCore-6_Q16-1-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102640" comment="libMagickWand-6_Q16-1-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130985" comment="libMagickCore-6_Q16-1-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130986" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130987" comment="libMagickWand-6_Q16-1-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130986" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131744" comment="ImageMagick-devel-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131745" comment="libMagick++-devel-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131746" comment="perl-PerlMagick-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130985" comment="libMagickCore-6_Q16-1-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130987" comment="libMagickWand-6_Q16-1-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141198" comment="libMagickCore-6_Q16-1-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141199" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141200" comment="libMagickWand-6_Q16-1-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141199" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144703" comment="ImageMagick-devel-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144704" comment="libMagick++-devel-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144705" comment="perl-PerlMagick-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143221" comment="libMagickCore-6_Q16-1-6.8.8.1-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143222" comment="libMagickWand-6_Q16-1-6.8.8.1-5.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156376" comment="libMagickCore-6_Q16-1-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156377" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156378" comment="libMagickWand-6_Q16-1-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156377" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156379" comment="ImageMagick-devel-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156380" comment="libMagick++-devel-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156381" comment="perl-PerlMagick-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156376" comment="libMagickCore-6_Q16-1-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156378" comment="libMagickWand-6_Q16-1-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512008" comment="libMagickCore-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512009" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512010" comment="libMagickWand-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512009" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513618" comment="ImageMagick-devel-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513619" comment="libMagick++-devel-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513620" comment="perl-PerlMagick-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512008" comment="libMagickCore-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512010" comment="libMagickWand-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512669" comment="ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512670" comment="ImageMagick-config-6-upstream-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512671" comment="libMagickCore-6_Q16-1-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512672" comment="libMagickWand-6_Q16-1-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513894" comment="ImageMagick-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512669" comment="ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512670" comment="ImageMagick-config-6-upstream-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513895" comment="ImageMagick-devel-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513896" comment="libMagick++-6_Q16-3-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513897" comment="libMagick++-devel-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513898" comment="perl-PerlMagick-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513894" comment="ImageMagick-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513896" comment="libMagick++-6_Q16-3-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514265" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0248</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0248" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0248" ref_url="https://www.suse.com/security/cve/CVE-2012-0248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000150.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0692-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE-SU"/>
    <description>
    ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-0248/">CVE-2012-0248</cve>
	<bugzilla href="https://bugzilla.suse.com/746880">SUSE bug 746880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752879">SUSE bug 752879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102630" comment="ImageMagick-devel-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102636" comment="libMagick++-devel-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102641" comment="perl-PerlMagick-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102637" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102638" comment="libMagickCore-6_Q16-1-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102637" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102640" comment="libMagickWand-6_Q16-1-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102638" comment="libMagickCore-6_Q16-1-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102640" comment="libMagickWand-6_Q16-1-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130985" comment="libMagickCore-6_Q16-1-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130986" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130987" comment="libMagickWand-6_Q16-1-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130986" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131744" comment="ImageMagick-devel-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131745" comment="libMagick++-devel-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131746" comment="perl-PerlMagick-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130985" comment="libMagickCore-6_Q16-1-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130987" comment="libMagickWand-6_Q16-1-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141198" comment="libMagickCore-6_Q16-1-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141199" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141200" comment="libMagickWand-6_Q16-1-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141199" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144703" comment="ImageMagick-devel-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144704" comment="libMagick++-devel-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144705" comment="perl-PerlMagick-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143221" comment="libMagickCore-6_Q16-1-6.8.8.1-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143222" comment="libMagickWand-6_Q16-1-6.8.8.1-5.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156376" comment="libMagickCore-6_Q16-1-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156377" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156378" comment="libMagickWand-6_Q16-1-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156377" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156379" comment="ImageMagick-devel-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156380" comment="libMagick++-devel-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156381" comment="perl-PerlMagick-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156376" comment="libMagickCore-6_Q16-1-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156378" comment="libMagickWand-6_Q16-1-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512008" comment="libMagickCore-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512009" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512010" comment="libMagickWand-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512009" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513618" comment="ImageMagick-devel-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513619" comment="libMagick++-devel-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513620" comment="perl-PerlMagick-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512008" comment="libMagickCore-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512010" comment="libMagickWand-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512669" comment="ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512670" comment="ImageMagick-config-6-upstream-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512671" comment="libMagickCore-6_Q16-1-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512672" comment="libMagickWand-6_Q16-1-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513894" comment="ImageMagick-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512669" comment="ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512670" comment="ImageMagick-config-6-upstream-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513895" comment="ImageMagick-devel-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513896" comment="libMagick++-6_Q16-3-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513897" comment="libMagick++-devel-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513898" comment="perl-PerlMagick-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513894" comment="ImageMagick-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513896" comment="libMagick++-6_Q16-3-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514265" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0390</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0390" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0390" ref_url="https://www.suse.com/security/cve/CVE-2012-0390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000163.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000167.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0344-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00010.html" source="SUSE-SU"/>
    <description>
    The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related issue to CVE-2011-4108.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0390/">CVE-2012-0390</cve>
	<bugzilla href="https://bugzilla.suse.com/739898">SUSE bug 739898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114254" comment="libgnutls-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114256" comment="libgnutls-openssl-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114260" comment="libgnutlsxx-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114261" comment="libgnutlsxx28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143200" comment="libgnutls-openssl27-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144859" comment="libgnutls-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144860" comment="libgnutls-openssl-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144861" comment="libgnutlsxx-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144862" comment="libgnutlsxx28-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159005" comment="libgnutls-openssl27-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159806" comment="libgnutls-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159807" comment="libgnutls-openssl-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159808" comment="libgnutlsxx-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159809" comment="libgnutlsxx28-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512898" comment="libgnutls-openssl27-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513726" comment="libgnutls-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513727" comment="libgnutls-openssl-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513728" comment="libgnutlsxx-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513729" comment="libgnutlsxx28-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0441</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0441" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0441" ref_url="https://www.suse.com/security/cve/CVE-2012-0441" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0441/">CVE-2012-0441</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0442</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0442" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0442" ref_url="https://www.suse.com/security/cve/CVE-2012-0442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0198-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0221-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0442/">CVE-2012-0442</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0443</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0443" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0443" ref_url="https://www.suse.com/security/cve/CVE-2012-0443" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0234-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0443/">CVE-2012-0443</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0444</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0444" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0444" ref_url="https://www.suse.com/security/cve/CVE-2012-0444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0319-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0444/">CVE-2012-0444</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747912">SUSE bug 747912</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150271" comment="libvorbis-doc-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144948" comment="libvorbis-devel-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145171" comment="libvorbis-devel-1.3.3-8.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144948" comment="libvorbis-devel-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140997" comment="libvorbis-doc-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140998" comment="libvorbis0-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141000" comment="libvorbisenc2-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141002" comment="libvorbisfile3-1.3.3-8.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141724" comment="libvorbis0-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140999" comment="libvorbis0-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141725" comment="libvorbisenc2-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141001" comment="libvorbisenc2-32bit-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141726" comment="libvorbisfile3-1.3.3-8.23 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141003" comment="libvorbisfile3-32bit-1.3.3-8.23 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145171" comment="libvorbis-devel-1.3.3-8.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178202" comment="libvorbis0-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178203" comment="libvorbis0-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178204" comment="libvorbisenc2-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178205" comment="libvorbisenc2-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178206" comment="libvorbisfile3-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178207" comment="libvorbisfile3-32bit-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178247" comment="libvorbis-doc-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178202" comment="libvorbis0-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178203" comment="libvorbis0-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178204" comment="libvorbisenc2-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178205" comment="libvorbisenc2-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178206" comment="libvorbisfile3-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178207" comment="libvorbisfile3-32bit-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178247" comment="libvorbis-doc-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178202" comment="libvorbis0-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178203" comment="libvorbis0-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178204" comment="libvorbisenc2-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178205" comment="libvorbisenc2-32bit-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178206" comment="libvorbisfile3-1.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178207" comment="libvorbisfile3-32bit-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178241" comment="libvorbis-devel-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178241" comment="libvorbis-devel-1.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0445</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0445" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0445" ref_url="https://www.suse.com/security/cve/CVE-2012-0445" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame's name attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0445/">CVE-2012-0445</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0446</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0446" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0446" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0446" ref_url="https://www.suse.com/security/cve/CVE-2012-0446" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a (1) web page or (2) Firefox extension, related to improper enforcement of XPConnect security restrictions for frame scripts that call untrusted objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0446/">CVE-2012-0446</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0447</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0447" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0447" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0447" ref_url="https://www.suse.com/security/cve/CVE-2012-0447" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0447/">CVE-2012-0447</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0449</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0449" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0449" ref_url="https://www.suse.com/security/cve/CVE-2012-0449" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0449/">CVE-2012-0449</cve>
	<bugzilla href="https://bugzilla.suse.com/744275">SUSE bug 744275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0451</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0451" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0451" ref_url="https://www.suse.com/security/cve/CVE-2012-0451" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0451/">CVE-2012-0451</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0452</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0452" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0452" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0452" ref_url="https://www.suse.com/security/cve/CVE-2012-0452" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0261-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0258-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger failure of an nsXBLDocumentInfo::ReadPrototypeBindings function call, related to the cycle collector's access to a hash table containing a stale XBL binding.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0452/">CVE-2012-0452</cve>
	<bugzilla href="https://bugzilla.suse.com/746616">SUSE bug 746616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746663">SUSE bug 746663</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0455</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0455" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0455" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0455" ref_url="https://www.suse.com/security/cve/CVE-2012-0455" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a "DragAndDropJacking" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0455/">CVE-2012-0455</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0456</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0456" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0456" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0456" ref_url="https://www.suse.com/security/cve/CVE-2012-0456" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0456/">CVE-2012-0456</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0457</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0457" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0457" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0457" ref_url="https://www.suse.com/security/cve/CVE-2012-0457" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0457/">CVE-2012-0457</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0458</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0458" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0458" ref_url="https://www.suse.com/security/cve/CVE-2012-0458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0458/">CVE-2012-0458</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0459</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0459" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0459" ref_url="https://www.suse.com/security/cve/CVE-2012-0459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0459/">CVE-2012-0459</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0460</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0460" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0460" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0460" ref_url="https://www.suse.com/security/cve/CVE-2012-0460" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0460/">CVE-2012-0460</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0461</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0461" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0461" ref_url="https://www.suse.com/security/cve/CVE-2012-0461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0461/">CVE-2012-0461</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0462</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0462" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0462" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0462" ref_url="https://www.suse.com/security/cve/CVE-2012-0462" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0462/">CVE-2012-0462</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0463</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0463" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0463" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0463" ref_url="https://www.suse.com/security/cve/CVE-2012-0463" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0463/">CVE-2012-0463</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0464</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0464" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0464" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0464" ref_url="https://www.suse.com/security/cve/CVE-2012-0464" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0417-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0464/">CVE-2012-0464</cve>
	<bugzilla href="https://bugzilla.suse.com/746591">SUSE bug 746591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/750044">SUSE bug 750044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752168">SUSE bug 752168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0467</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0467" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0467" ref_url="https://www.suse.com/security/cve/CVE-2012-0467" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0467/">CVE-2012-0467</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0468</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0468" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0468" ref_url="https://www.suse.com/security/cve/CVE-2012-0468" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corruption) or possibly execute arbitrary code via vectors related to jsval.h and the js::array_shift function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0468/">CVE-2012-0468</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0469</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0469" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0469" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0469" ref_url="https://www.suse.com/security/cve/CVE-2012-0469" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0469/">CVE-2012-0469</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0470</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0470" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0470" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0470" ref_url="https://www.suse.com/security/cve/CVE-2012-0470" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of "different number systems."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0470/">CVE-2012-0470</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0471</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0471" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0471" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0471" ref_url="https://www.suse.com/security/cve/CVE-2012-0471" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via a multibyte character set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0471/">CVE-2012-0471</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0472</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0472" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0472" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0472" ref_url="https://www.suse.com/security/cve/CVE-2012-0472" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0472/">CVE-2012-0472</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0473</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0473" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0473" ref_url="https://www.suse.com/security/cve/CVE-2012-0473" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 calls the FindMaxElementInSubArray function with incorrect template arguments, which allows remote attackers to obtain sensitive information from video memory via a crafted WebGL.drawElements call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0473/">CVE-2012-0473</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0474</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0474" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0474" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0474" ref_url="https://www.suse.com/security/cve/CVE-2012-0474" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via vectors related to short-circuited page loads, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0474/">CVE-2012-0474</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0475</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0475" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0475" ref_url="https://www.suse.com/security/cve/CVE-2012-0475" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers to bypass an IPv6 literal ACL via a cross-site (1) XMLHttpRequest or (2) WebSocket operation involving a nonstandard port number and an IPv6 address that contains certain zero fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0475/">CVE-2012-0475</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0477</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0477" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0477" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0477" ref_url="https://www.suse.com/security/cve/CVE-2012-0477" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) ISO-2022-KR or (2) ISO-2022-CN character set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0477/">CVE-2012-0477</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0478</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0478" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0478" ref_url="https://www.suse.com/security/cve/CVE-2012-0478" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 does not properly restrict JSVAL_TO_OBJECT casts, which might allow remote attackers to execute arbitrary code via a crafted web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0478/">CVE-2012-0478</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0479</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0479" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0479" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0479" ref_url="https://www.suse.com/security/cve/CVE-2012-0479" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0580-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0567-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0479/">CVE-2012-0479</cve>
	<bugzilla href="https://bugzilla.suse.com/758408">SUSE bug 758408</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0497</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0497" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0497" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0497" ref_url="https://www.suse.com/security/cve/CVE-2012-0497" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0497/">CVE-2012-0497</cve>
	<bugzilla href="https://bugzilla.suse.com/747208">SUSE bug 747208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758470">SUSE bug 758470</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0501</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0501" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0501" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0501" ref_url="https://www.suse.com/security/cve/CVE-2012-0501" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0501/">CVE-2012-0501</cve>
	<bugzilla href="https://bugzilla.suse.com/747208">SUSE bug 747208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758470">SUSE bug 758470</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0502</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0502" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0502" ref_url="https://www.suse.com/security/cve/CVE-2012-0502" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and availability, related to AWT.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0502/">CVE-2012-0502</cve>
	<bugzilla href="https://bugzilla.suse.com/747208">SUSE bug 747208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758470">SUSE bug 758470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763805">SUSE bug 763805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0503</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0503" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0503" ref_url="https://www.suse.com/security/cve/CVE-2012-0503" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to I18n.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0503/">CVE-2012-0503</cve>
	<bugzilla href="https://bugzilla.suse.com/747208">SUSE bug 747208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758470">SUSE bug 758470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763805">SUSE bug 763805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0505</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0505" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0505" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0505" ref_url="https://www.suse.com/security/cve/CVE-2012-0505" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0505/">CVE-2012-0505</cve>
	<bugzilla href="https://bugzilla.suse.com/747208">SUSE bug 747208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758470">SUSE bug 758470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763805">SUSE bug 763805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0506</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0506" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0506" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0506" ref_url="https://www.suse.com/security/cve/CVE-2012-0506" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0602-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0603-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0309-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00025.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to CORBA.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0506/">CVE-2012-0506</cve>
	<bugzilla href="https://bugzilla.suse.com/747208">SUSE bug 747208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/758470">SUSE bug 758470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763805">SUSE bug 763805</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0547</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0547" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0547" ref_url="https://www.suse.com/security/cve/CVE-2012-0547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00019.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited." NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities.  NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "toolkit internals references."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-31"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-0547/">CVE-2012-0547</cve>
	<bugzilla href="https://bugzilla.suse.com/777499">SUSE bug 777499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334125" comment="java-1_7_0-openjdk is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334125" comment="java-1_7_0-openjdk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336114" comment="java-1_7_0-openjdk-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336115" comment="java-1_7_0-openjdk-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336113" comment="java-1_7_0-openjdk-headless is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0551</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0551" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0551" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0551" ref_url="https://www.suse.com/security/cve/CVE-2012-0551" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0551/">CVE-2012-0551</cve>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0751</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0751" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0751" ref_url="https://www.suse.com/security/cve/CVE-2012-0751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE-SU"/>
    <description>
    The ActiveX control in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0751/">CVE-2012-0751</cve>
	<bugzilla href="https://bugzilla.suse.com/747297">SUSE bug 747297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747307">SUSE bug 747307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0752</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0752" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0752" ref_url="https://www.suse.com/security/cve/CVE-2012-0752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an unspecified "type confusion."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0752/">CVE-2012-0752</cve>
	<bugzilla href="https://bugzilla.suse.com/747297">SUSE bug 747297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747307">SUSE bug 747307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0753</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0753" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0753" ref_url="https://www.suse.com/security/cve/CVE-2012-0753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted MP4 data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0753/">CVE-2012-0753</cve>
	<bugzilla href="https://bugzilla.suse.com/747297">SUSE bug 747297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747307">SUSE bug 747307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0754</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0754" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0754" ref_url="https://www.suse.com/security/cve/CVE-2012-0754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0754/">CVE-2012-0754</cve>
	<bugzilla href="https://bugzilla.suse.com/747297">SUSE bug 747297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747307">SUSE bug 747307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0755</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0755" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0755" ref_url="https://www.suse.com/security/cve/CVE-2012-0755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2012-0756.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0755/">CVE-2012-0755</cve>
	<bugzilla href="https://bugzilla.suse.com/747297">SUSE bug 747297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747307">SUSE bug 747307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0756</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0756" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0756" ref_url="https://www.suse.com/security/cve/CVE-2012-0756" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2012-0755.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0756/">CVE-2012-0756</cve>
	<bugzilla href="https://bugzilla.suse.com/747297">SUSE bug 747297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747307">SUSE bug 747307</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0759</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0759" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0759" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0759" ref_url="https://www.suse.com/security/cve/CVE-2012-0759" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0771.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0759/">CVE-2012-0759</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0767" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0767" ref_url="https://www.suse.com/security/cve/CVE-2012-0767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0280-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0299-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-02/msg00014.html" source="SUSE-SU"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)," as exploited in the wild in February 2012.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0767/">CVE-2012-0767</cve>
	<bugzilla href="https://bugzilla.suse.com/747297">SUSE bug 747297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747309">SUSE bug 747309</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0768</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0768" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0768" ref_url="https://www.suse.com/security/cve/CVE-2012-0768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0332-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0349-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00014.html" source="SUSE-SU"/>
    <description>
    The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0768/">CVE-2012-0768</cve>
	<bugzilla href="https://bugzilla.suse.com/750614">SUSE bug 750614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0769</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0769" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0769" ref_url="https://www.suse.com/security/cve/CVE-2012-0769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0332-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0332-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0331-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0349-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00014.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x does not properly handle integers, which allows attackers to obtain sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0769/">CVE-2012-0769</cve>
	<bugzilla href="https://bugzilla.suse.com/750614">SUSE bug 750614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0773</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0773" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0773" ref_url="https://www.suse.com/security/cve/CVE-2012-0773" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0427-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00017.html" source="SUSE-SU"/>
    <description>
    The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0773/">CVE-2012-0773</cve>
	<bugzilla href="https://bugzilla.suse.com/754688">SUSE bug 754688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754689">SUSE bug 754689</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0779</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0779" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0779" ref_url="https://www.suse.com/security/cve/CVE-2012-0779" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0592-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0594-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00005.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0779/">CVE-2012-0779</cve>
	<bugzilla href="https://bugzilla.suse.com/760777">SUSE bug 760777</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0786</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0786" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0786" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0786" ref_url="https://www.suse.com/security/cve/CVE-2012-0786" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000961.html" source="SUSE-SU"/>
    <description>
    The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-0786/">CVE-2012-0786</cve>
	<bugzilla href="https://bugzilla.suse.com/853044">SUSE bug 853044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885003">SUSE bug 885003</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009111368" comment="augeas-devel-1.2.0-3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009111372" comment="libaugeas0-1.2.0-3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141442" comment="libaugeas0-1.2.0-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144714" comment="augeas-devel-1.2.0-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145200" comment="augeas-devel-1.2.0-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159744" comment="augeas-devel-1.2.0-15.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172860" comment="augeas-devel-1.2.0-17.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513909" comment="augeas-devel-1.10.1-2.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009111367" comment="augeas-1.2.0-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009111371" comment="augeas-lenses-1.2.0-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009111372" comment="libaugeas0-1.2.0-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140461" comment="augeas-1.2.0-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140462" comment="augeas-lenses-1.2.0-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140463" comment="libaugeas0-1.2.0-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143133" comment="augeas-1.2.0-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143134" comment="augeas-lenses-1.2.0-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141442" comment="libaugeas0-1.2.0-1.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158941" comment="augeas-1.2.0-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158942" comment="augeas-lenses-1.2.0-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158943" comment="libaugeas0-1.2.0-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009172798" comment="augeas-1.2.0-17.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172799" comment="augeas-lenses-1.2.0-17.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172800" comment="libaugeas0-1.2.0-17.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512707" comment="augeas-1.10.1-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512708" comment="augeas-lenses-1.10.1-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512709" comment="libaugeas0-1.10.1-2.6 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0804</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0804" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0804" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0804" ref_url="https://www.suse.com/security/cve/CVE-2012-0804" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-February/000043.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0310-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-02/msg00064.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0804/">CVE-2012-0804</cve>
	<bugzilla href="https://bugzilla.suse.com/744059">SUSE bug 744059</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140516" comment="cvs-1.12.12-181.63 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009163575" comment="cvs-1.12.12-182.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140516" comment="cvs-1.12.12-181.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140517" comment="cvs-doc-1.12.12-181.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147517" comment="cvs-1.12.12-181.54 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147518" comment="cvs-doc-1.12.12-181.54 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009163575" comment="cvs-1.12.12-182.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009163579" comment="cvs-doc-1.12.12-182.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0810</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0810" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0810" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0810" ref_url="https://www.suse.com/security/cve/CVE-2012-0810" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
    <description>
    The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-0810/">CVE-2012-0810</cve>
	<bugzilla href="https://bugzilla.suse.com/749118">SUSE bug 749118</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0814</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0814" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0814" ref_url="https://www.suse.com/security/cve/CVE-2012-0814" source="SUSE CVE"/>
    <description>
    The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite. NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-0814/">CVE-2012-0814</cve>
	<bugzilla href="https://bugzilla.suse.com/744643">SUSE bug 744643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/755505">SUSE bug 755505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/770728">SUSE bug 770728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826672">SUSE bug 826672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/996040">SUSE bug 996040</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333996" comment="openssh is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335281" comment="openssh-fips is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335282" comment="openssh-helpers is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0817</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0817" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0817" ref_url="https://www.suse.com/security/cve/CVE-2012-0817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html" source="SUSE-SU"/>
    <description>
    Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0817/">CVE-2012-0817</cve>
	<bugzilla href="https://bugzilla.suse.com/743986">SUSE bug 743986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0830</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0830" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0830" ref_url="https://www.suse.com/security/cve/CVE-2012-0830" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0496-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0426-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html" source="SUSE-SU"/>
    <description>
    The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0830/">CVE-2012-0830</cve>
	<bugzilla href="https://bugzilla.suse.com/733590">SUSE bug 733590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/736169">SUSE bug 736169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/738221">SUSE bug 738221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741520">SUSE bug 741520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/741859">SUSE bug 741859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742273">SUSE bug 742273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/742806">SUSE bug 742806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743308">SUSE bug 743308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/744966">SUSE bug 744966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/746661">SUSE bug 746661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749111">SUSE bug 749111</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336869" comment="apache2-mod_php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333962" comment="php5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336870" comment="php5-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336871" comment="php5-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336872" comment="php5-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336873" comment="php5-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336874" comment="php5-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336875" comment="php5-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336877" comment="php5-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728404" comment="php5-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336878" comment="php5-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336879" comment="php5-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728405" comment="php5-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728406" comment="php5-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336880" comment="php5-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336881" comment="php5-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336882" comment="php5-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336883" comment="php5-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336885" comment="php5-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336913" comment="php5-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728407" comment="php5-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336886" comment="php5-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336887" comment="php5-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336888" comment="php5-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336889" comment="php5-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336890" comment="php5-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336891" comment="php5-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728408" comment="php5-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336892" comment="php5-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336893" comment="php5-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336894" comment="php5-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336895" comment="php5-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336896" comment="php5-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728409" comment="php5-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336915" comment="php5-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336897" comment="php5-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336898" comment="php5-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336899" comment="php5-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336900" comment="php5-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336917" comment="php5-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336918" comment="php5-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336901" comment="php5-suhosin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336902" comment="php5-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336903" comment="php5-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336904" comment="php5-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336905" comment="php5-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336906" comment="php5-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336907" comment="php5-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336908" comment="php5-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336909" comment="php5-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336910" comment="php5-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336911" comment="php5-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336912" comment="php5-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651193" comment="apache2-mod_php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333970" comment="php7 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651194" comment="php7-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651195" comment="php7-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651196" comment="php7-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651197" comment="php7-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651198" comment="php7-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651199" comment="php7-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651200" comment="php7-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651201" comment="php7-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651202" comment="php7-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651203" comment="php7-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651204" comment="php7-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651205" comment="php7-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651206" comment="php7-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651207" comment="php7-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651208" comment="php7-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651209" comment="php7-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651210" comment="php7-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728410" comment="php7-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651211" comment="php7-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651212" comment="php7-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651213" comment="php7-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651214" comment="php7-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728411" comment="php7-mcrypt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651215" comment="php7-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651216" comment="php7-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651217" comment="php7-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651218" comment="php7-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651219" comment="php7-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651220" comment="php7-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651221" comment="php7-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651222" comment="php7-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651223" comment="php7-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651224" comment="php7-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651225" comment="php7-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728412" comment="php7-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651227" comment="php7-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651228" comment="php7-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651229" comment="php7-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651230" comment="php7-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651232" comment="php7-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651233" comment="php7-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651234" comment="php7-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651235" comment="php7-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651236" comment="php7-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651237" comment="php7-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651238" comment="php7-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651239" comment="php7-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651240" comment="php7-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651241" comment="php7-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651242" comment="php7-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009651243" comment="php7-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728413" comment="apache2-mod_php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333971" comment="php72 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728414" comment="php72-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728415" comment="php72-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728416" comment="php72-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728417" comment="php72-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728418" comment="php72-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728419" comment="php72-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728420" comment="php72-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728421" comment="php72-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728422" comment="php72-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728423" comment="php72-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728424" comment="php72-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728425" comment="php72-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728426" comment="php72-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728427" comment="php72-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728428" comment="php72-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728429" comment="php72-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728430" comment="php72-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728431" comment="php72-imap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728432" comment="php72-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728433" comment="php72-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728434" comment="php72-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728435" comment="php72-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728436" comment="php72-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728437" comment="php72-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728438" comment="php72-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728439" comment="php72-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728440" comment="php72-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728441" comment="php72-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728442" comment="php72-pear is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728443" comment="php72-pear-Archive_Tar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728444" comment="php72-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728445" comment="php72-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728446" comment="php72-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728447" comment="php72-pspell is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728448" comment="php72-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728449" comment="php72-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728450" comment="php72-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728451" comment="php72-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728452" comment="php72-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728453" comment="php72-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728454" comment="php72-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728455" comment="php72-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728456" comment="php72-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728457" comment="php72-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728458" comment="php72-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728459" comment="php72-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728460" comment="php72-wddx is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728461" comment="php72-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728462" comment="php72-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728463" comment="php72-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728464" comment="php72-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728465" comment="php72-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728466" comment="php72-zlib is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728467" comment="apache2-mod_php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728468" comment="php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728469" comment="php74-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728470" comment="php74-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728471" comment="php74-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728472" comment="php74-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728473" comment="php74-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728474" comment="php74-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728475" comment="php74-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728476" comment="php74-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728477" comment="php74-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728478" comment="php74-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728479" comment="php74-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728480" comment="php74-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728481" comment="php74-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728482" comment="php74-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728483" comment="php74-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728484" comment="php74-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728485" comment="php74-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728486" comment="php74-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728487" comment="php74-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728488" comment="php74-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728489" comment="php74-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728490" comment="php74-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728491" comment="php74-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728492" comment="php74-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728493" comment="php74-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728494" comment="php74-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728495" comment="php74-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728496" comment="php74-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728497" comment="php74-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728498" comment="php74-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728499" comment="php74-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728500" comment="php74-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728501" comment="php74-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728502" comment="php74-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728503" comment="php74-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728504" comment="php74-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728505" comment="php74-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728506" comment="php74-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728507" comment="php74-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728508" comment="php74-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728509" comment="php74-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728510" comment="php74-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728511" comment="php74-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728512" comment="php74-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728513" comment="php74-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728514" comment="php74-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728515" comment="php74-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728516" comment="php74-zlib is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0845</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0845" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0845" ref_url="https://www.suse.com/security/cve/CVE-2012-0845" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0667-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0845/">CVE-2012-0845</cve>
	<bugzilla href="https://bugzilla.suse.com/747125">SUSE bug 747125</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514245" comment="python3-devel-3.4.6-25.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131910" comment="python-base-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143249" comment="python-base-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144986" comment="python3-devel-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143365" comment="python-base-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159189" comment="python-base-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159835" comment="python3-devel-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513548" comment="python-base-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513875" comment="python3-devel-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513207" comment="libpython2_7-1_0-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513208" comment="libpython2_7-1_0-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513213" comment="libpython3_4m1_0-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513214" comment="libpython3_4m1_0-32bit-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513216" comment="libpython3_6m1_0-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513209" comment="python-base-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513210" comment="python-base-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513212" comment="python-xml-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513215" comment="python3-base-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513217" comment="python36-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513218" comment="python36-base-3.6.8-2.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009557648" comment="libpython3_6m1_0-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557649" comment="python36-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557650" comment="python36-base-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557651" comment="python36-curses-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557652" comment="python36-dbm-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557653" comment="python36-devel-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557654" comment="python36-doc-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557655" comment="python36-testsuite-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557656" comment="python36-tk-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557657" comment="python36-tools-3.6.8-6.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0862</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0862" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0862" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0862" ref_url="https://www.suse.com/security/cve/CVE-2012-0862" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-March/000774.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-July/000898.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0494-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0517-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00034.html" source="SUSE-SU"/>
    <description>
    builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0862/">CVE-2012-0862</cve>
	<bugzilla href="https://bugzilla.suse.com/762294">SUSE bug 762294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/844230">SUSE bug 844230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/855685">SUSE bug 855685</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141167" comment="xinetd-2.3.15-7.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147613" comment="xinetd-2.3.15-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512634" comment="xinetd-2.3.15-8.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0866</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0866" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0866" ref_url="https://www.suse.com/security/cve/CVE-2012-0866" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000131.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0480-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html" source="SUSE-SU"/>
    <description>
    CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0866/">CVE-2012-0866</cve>
	<bugzilla href="https://bugzilla.suse.com/701489">SUSE bug 701489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749299">SUSE bug 749299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749301">SUSE bug 749301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749303">SUSE bug 749303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0867</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0867" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0867" ref_url="https://www.suse.com/security/cve/CVE-2012-0867" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0480-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html" source="SUSE-SU"/>
    <description>
    PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0867/">CVE-2012-0867</cve>
	<bugzilla href="https://bugzilla.suse.com/701489">SUSE bug 701489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749299">SUSE bug 749299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749301">SUSE bug 749301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749303">SUSE bug 749303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0868</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0868" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0868" ref_url="https://www.suse.com/security/cve/CVE-2012-0868" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000130.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000131.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0480-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1173-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00060.html" source="SUSE-SU"/>
    <description>
    CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0868/">CVE-2012-0868</cve>
	<bugzilla href="https://bugzilla.suse.com/701489">SUSE bug 701489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749299">SUSE bug 749299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749301">SUSE bug 749301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749303">SUSE bug 749303</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0870</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0870" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0870" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0870" ref_url="https://www.suse.com/security/cve/CVE-2012-0870" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0337-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0338-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00011.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-0870/">CVE-2012-0870</cve>
	<bugzilla href="https://bugzilla.suse.com/747934">SUSE bug 747934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752797">SUSE bug 752797</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0876</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0876" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0876" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0876" ref_url="https://www.suse.com/security/cve/CVE-2012-0876" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000155.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00046.html" source="SUSE-SU"/>
    <description>
    The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0876/">CVE-2012-0876</cve>
	<bugzilla href="https://bugzilla.suse.com/750914">SUSE bug 750914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751464">SUSE bug 751464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751465">SUSE bug 751465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983215">SUSE bug 983215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983216">SUSE bug 983216</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-pos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128469" comment="libexpat-devel-2.1.0-17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144855" comment="libexpat-devel-2.1.0-13.232 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148248" comment="libexpat-devel-2.1.0-20.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128466" comment="libexpat1-32bit-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148243" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148244" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148245" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522652" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522653" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522654" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522655" comment="python3-curses-3.4.10-25.39.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529634" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529635" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529636" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009555302" comment="python3-curses-3.4.10-25.39.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162539" comment="libexpat-devel-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009542717" comment="python3-dbm-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009542718" comment="python3-devel-3.4.10-25.39.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529634" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009559882" comment="libpython3_4m1_0-32bit-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529635" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529636" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009555302" comment="python3-curses-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009559883" comment="python3-tk-3.4.10-25.39.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514062" comment="libexpat-devel-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009542717" comment="python3-dbm-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009542718" comment="python3-devel-3.4.10-25.39.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156852" comment="SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009522652" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522653" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522654" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522655" comment="python3-curses-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009531736" comment="python3-devel-3.4.10-25.39.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009522652" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522653" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522654" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009522655" comment="python3-curses-3.4.10-25.39.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009529634" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529635" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529636" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009555302" comment="python3-curses-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009542718" comment="python3-devel-3.4.10-25.39.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009529634" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529635" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529636" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009555302" comment="python3-curses-3.4.10-25.39.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009529634" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529635" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529636" comment="python3-base-3.4.10-25.39.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009529634" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009559882" comment="libpython3_4m1_0-32bit-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529635" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009529636" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009555302" comment="python3-curses-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009559883" comment="python3-tk-3.4.10-25.39.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009538005" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009538006" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009538007" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009538008" comment="python3-curses-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009538009" comment="python3-devel-3.4.10-25.39.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009549064" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009549065" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009549066" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009549067" comment="python3-curses-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009549068" comment="python3-devel-3.4.10-25.39.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009556784" comment="libpython3_4m1_0-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009556785" comment="python3-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009556786" comment="python3-base-3.4.10-25.39.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009556787" comment="python3-curses-3.4.10-25.39.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009556788" comment="python3-devel-3.4.10-25.39.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120879" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0879</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0879" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0879" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0879" ref_url="https://www.suse.com/security/cve/CVE-2012-0879" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
    <description>
    The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-0879/">CVE-2012-0879</cve>
	<bugzilla href="https://bugzilla.suse.com/748812">SUSE bug 748812</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0884</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0884" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0884" ref_url="https://www.suse.com/security/cve/CVE-2012-0884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0547-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0884/">CVE-2012-0884</cve>
	<bugzilla href="https://bugzilla.suse.com/749210">SUSE bug 749210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749735">SUSE bug 749735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751977">SUSE bug 751977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754640">SUSE bug 754640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/761819">SUSE bug 761819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0957</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-0957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0957" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-0957" ref_url="https://www.suse.com/security/cve/CVE-2012-0957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000339.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0957/">CVE-2012-0957</cve>
	<bugzilla href="https://bugzilla.suse.com/783515">SUSE bug 783515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/783606">SUSE bug 783606</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1012</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1012" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1012" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1012" ref_url="https://www.suse.com/security/cve/CVE-2012-1012" source="SUSE CVE"/>
    <description>
    server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1012/">CVE-2012-1012</cve>
	<bugzilla href="https://bugzilla.suse.com/766109">SUSE bug 766109</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1013</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1013" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1013" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1013" ref_url="https://www.suse.com/security/cve/CVE-2012-1013" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0834-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00014.html" source="SUSE-SU"/>
    <description>
    The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL pointer dereference and daemon crash) via a KRB5_KDB_DISALLOW_ALL_TIX create request that lacks a password.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-1013/">CVE-2012-1013</cve>
	<bugzilla href="https://bugzilla.suse.com/765485">SUSE bug 765485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121014" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1014</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1014" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1014" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1014" ref_url="https://www.suse.com/security/cve/CVE-2012-1014" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0967-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00016.html" source="SUSE-SU"/>
    <description>
    The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a malformed AS-REQ request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-23"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-1014/">CVE-2012-1014</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334930" comment="krb5-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333953" comment="krb5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334923" comment="krb5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334924" comment="krb5-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334925" comment="krb5-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334926" comment="krb5-plugin-kdb-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334927" comment="krb5-plugin-preauth-otp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334928" comment="krb5-plugin-preauth-pkinit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334929" comment="krb5-server is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333953" comment="krb5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334923" comment="krb5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334924" comment="krb5-client is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1015</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1015" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1015" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1015" ref_url="https://www.suse.com/security/cve/CVE-2012-1015" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0967-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00016.html" source="SUSE-SU"/>
    <description>
    The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free, heap memory corruption, and daemon crash) via a crafted AS-REQ request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-1015/">CVE-2012-1015</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334930" comment="krb5-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333953" comment="krb5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334923" comment="krb5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334924" comment="krb5-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334925" comment="krb5-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334926" comment="krb5-plugin-kdb-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334927" comment="krb5-plugin-preauth-otp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334928" comment="krb5-plugin-preauth-pkinit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334929" comment="krb5-server is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333953" comment="krb5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334923" comment="krb5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334924" comment="krb5-client is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1016</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1016" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1016" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1016" ref_url="https://www.suse.com/security/cve/CVE-2012-1016" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00069.html" source="SUSE-SU"/>
    <description>
    The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 attempts to find an agility KDF identifier in inappropriate circumstances, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted Draft 9 request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1016/">CVE-2012-1016</cve>
	<bugzilla href="https://bugzilla.suse.com/807556">SUSE bug 807556</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1090</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1090" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1090" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1090" ref_url="https://www.suse.com/security/cve/CVE-2012-1090" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0554-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0554-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0540-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-1090/">CVE-2012-1090</cve>
	<bugzilla href="https://bugzilla.suse.com/749569">SUSE bug 749569</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1095</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1095" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1095" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1095" ref_url="https://www.suse.com/security/cve/CVE-2012-1095" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0400-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00035.html" source="SUSE-SU"/>
    <description>
    osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-1095/">CVE-2012-1095</cve>
	<bugzilla href="https://bugzilla.suse.com/749335">SUSE bug 749335</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144978" comment="osc-0.148.1-1.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145177" comment="osc-0.152.0-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159833" comment="osc-0.158.0-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513867" comment="osc-0.162.1-15.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1096</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1096" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1096" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1096" ref_url="https://www.suse.com/security/cve/CVE-2012-1096" source="SUSE CVE"/>
    <description>
    NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2012-1096/">CVE-2012-1096</cve>
	<bugzilla href="https://bugzilla.suse.com/738073">SUSE bug 738073</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334334" comment="NetworkManager is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335300" comment="NetworkManager-devel is affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334334" comment="NetworkManager is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335288" comment="NetworkManager-lang is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335289" comment="libnm-glib-vpn1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335290" comment="libnm-glib4 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335291" comment="libnm-util2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335913" comment="libnm0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335914" comment="typelib-1_0-NM-1_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335292" comment="typelib-1_0-NMClient-1_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335293" comment="typelib-1_0-NetworkManager-1_0 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334334" comment="NetworkManager is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335288" comment="NetworkManager-lang is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335914" comment="typelib-1_0-NM-1_0 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335289" comment="libnm-glib-vpn1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335290" comment="libnm-glib4 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335291" comment="libnm-util2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335292" comment="typelib-1_0-NMClient-1_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335293" comment="typelib-1_0-NetworkManager-1_0 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335289" comment="libnm-glib-vpn1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335290" comment="libnm-glib4 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335291" comment="libnm-util2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335913" comment="libnm0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335292" comment="typelib-1_0-NMClient-1_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335293" comment="typelib-1_0-NetworkManager-1_0 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335289" comment="libnm-glib-vpn1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335290" comment="libnm-glib4 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335291" comment="libnm-util2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335913" comment="libnm0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335914" comment="typelib-1_0-NM-1_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335292" comment="typelib-1_0-NMClient-1_0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335293" comment="typelib-1_0-NetworkManager-1_0 is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1126</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1126" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1126" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1126" ref_url="https://www.suse.com/security/cve/CVE-2012-1126" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1126/">CVE-2012-1126</cve>
	<bugzilla href="https://bugzilla.suse.com/750937">SUSE bug 750937</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1127</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1127" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1127" ref_url="https://www.suse.com/security/cve/CVE-2012-1127" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1127/">CVE-2012-1127</cve>
	<bugzilla href="https://bugzilla.suse.com/750947">SUSE bug 750947</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1128</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1128" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1128" ref_url="https://www.suse.com/security/cve/CVE-2012-1128" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1128/">CVE-2012-1128</cve>
	<bugzilla href="https://bugzilla.suse.com/750942">SUSE bug 750942</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1129</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1129" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1129" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1129" ref_url="https://www.suse.com/security/cve/CVE-2012-1129" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1129/">CVE-2012-1129</cve>
	<bugzilla href="https://bugzilla.suse.com/750952">SUSE bug 750952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1130</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1130" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1130" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1130" ref_url="https://www.suse.com/security/cve/CVE-2012-1130" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1130/">CVE-2012-1130</cve>
	<bugzilla href="https://bugzilla.suse.com/750951">SUSE bug 750951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1131</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1131" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1131" ref_url="https://www.suse.com/security/cve/CVE-2012-1131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors related to the cell table of a font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1131/">CVE-2012-1131</cve>
	<bugzilla href="https://bugzilla.suse.com/750953">SUSE bug 750953</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1132</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1132" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1132" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1132" ref_url="https://www.suse.com/security/cve/CVE-2012-1132" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1132/">CVE-2012-1132</cve>
	<bugzilla href="https://bugzilla.suse.com/750950">SUSE bug 750950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1133</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1133" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1133" ref_url="https://www.suse.com/security/cve/CVE-2012-1133" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1133/">CVE-2012-1133</cve>
	<bugzilla href="https://bugzilla.suse.com/750940">SUSE bug 750940</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1134</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1134" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1134" ref_url="https://www.suse.com/security/cve/CVE-2012-1134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1134/">CVE-2012-1134</cve>
	<bugzilla href="https://bugzilla.suse.com/750945">SUSE bug 750945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1135</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1135" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1135" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1135" ref_url="https://www.suse.com/security/cve/CVE-2012-1135" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1135/">CVE-2012-1135</cve>
	<bugzilla href="https://bugzilla.suse.com/750946">SUSE bug 750946</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1136</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1136" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1136" ref_url="https://www.suse.com/security/cve/CVE-2012-1136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1136/">CVE-2012-1136</cve>
	<bugzilla href="https://bugzilla.suse.com/750939">SUSE bug 750939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1137</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1137" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1137" ref_url="https://www.suse.com/security/cve/CVE-2012-1137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1137/">CVE-2012-1137</cve>
	<bugzilla href="https://bugzilla.suse.com/750943">SUSE bug 750943</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1138</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1138" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1138" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1138" ref_url="https://www.suse.com/security/cve/CVE-2012-1138" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1138/">CVE-2012-1138</cve>
	<bugzilla href="https://bugzilla.suse.com/750941">SUSE bug 750941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1139</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1139" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1139" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1139" ref_url="https://www.suse.com/security/cve/CVE-2012-1139" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1139/">CVE-2012-1139</cve>
	<bugzilla href="https://bugzilla.suse.com/750938">SUSE bug 750938</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1140</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1140" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1140" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1140" ref_url="https://www.suse.com/security/cve/CVE-2012-1140" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1140/">CVE-2012-1140</cve>
	<bugzilla href="https://bugzilla.suse.com/750954">SUSE bug 750954</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1141</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1141" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1141" ref_url="https://www.suse.com/security/cve/CVE-2012-1141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1141/">CVE-2012-1141</cve>
	<bugzilla href="https://bugzilla.suse.com/750955">SUSE bug 750955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1142</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1142" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1142" ref_url="https://www.suse.com/security/cve/CVE-2012-1142" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1142/">CVE-2012-1142</cve>
	<bugzilla href="https://bugzilla.suse.com/750948">SUSE bug 750948</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1143</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1143" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1143" ref_url="https://www.suse.com/security/cve/CVE-2012-1143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0483-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0483-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0521-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0553-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1143/">CVE-2012-1143</cve>
	<bugzilla href="https://bugzilla.suse.com/750949">SUSE bug 750949</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1144</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1144" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1144" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1144" ref_url="https://www.suse.com/security/cve/CVE-2012-1144" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0484-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0489-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1144/">CVE-2012-1144</cve>
	<bugzilla href="https://bugzilla.suse.com/750944">SUSE bug 750944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1147</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1147" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1147" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1147" ref_url="https://www.suse.com/security/cve/CVE-2012-1147" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00046.html" source="SUSE-SU"/>
    <description>
    readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1147/">CVE-2012-1147</cve>
	<bugzilla href="https://bugzilla.suse.com/750914">SUSE bug 750914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751464">SUSE bug 751464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751465">SUSE bug 751465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128469" comment="libexpat-devel-2.1.0-17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144855" comment="libexpat-devel-2.1.0-13.232 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148248" comment="libexpat-devel-2.1.0-20.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162539" comment="libexpat-devel-2.1.0-21.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514062" comment="libexpat-devel-2.1.0-21.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128466" comment="libexpat1-32bit-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148243" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148244" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148245" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1148</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1148" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1148" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1148" ref_url="https://www.suse.com/security/cve/CVE-2012-1148" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000154.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000155.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0423-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00046.html" source="SUSE-SU"/>
    <description>
    Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1148/">CVE-2012-1148</cve>
	<bugzilla href="https://bugzilla.suse.com/750914">SUSE bug 750914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751464">SUSE bug 751464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751465">SUSE bug 751465</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128469" comment="libexpat-devel-2.1.0-17.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144855" comment="libexpat-devel-2.1.0-13.232 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148248" comment="libexpat-devel-2.1.0-20.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162539" comment="libexpat-devel-2.1.0-21.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514062" comment="libexpat-devel-2.1.0-21.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128466" comment="libexpat1-32bit-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128464" comment="expat-2.1.0-17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128465" comment="libexpat1-2.1.0-17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141325" comment="expat-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141326" comment="libexpat1-2.1.0-13.232 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141327" comment="libexpat1-32bit-2.1.0-13.232 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148243" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148244" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148245" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1150</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1150" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1150" ref_url="https://www.suse.com/security/cve/CVE-2012-1150" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000096.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000119.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0985-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000204.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0667-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-1150/">CVE-2012-1150</cve>
	<bugzilla href="https://bugzilla.suse.com/751718">SUSE bug 751718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/755383">SUSE bug 755383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826682">SUSE bug 826682</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514245" comment="python3-devel-3.4.6-25.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131910" comment="python-base-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141605" comment="libpython2_7-1_0-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141606" comment="libpython2_7-1_0-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141607" comment="python-base-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143249" comment="python-base-32bit-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141609" comment="python-xml-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141608" comment="python-devel-2.7.7-2.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144986" comment="python3-devel-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143365" comment="python-base-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159189" comment="python-base-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159835" comment="python3-devel-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513548" comment="python-base-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513875" comment="python3-devel-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513207" comment="libpython2_7-1_0-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513208" comment="libpython2_7-1_0-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513213" comment="libpython3_4m1_0-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513214" comment="libpython3_4m1_0-32bit-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513216" comment="libpython3_6m1_0-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513209" comment="python-base-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513210" comment="python-base-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513212" comment="python-xml-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513215" comment="python3-base-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513217" comment="python36-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513218" comment="python36-base-3.6.8-2.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009557648" comment="libpython3_6m1_0-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557649" comment="python36-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557650" comment="python36-base-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557651" comment="python36-curses-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557652" comment="python36-dbm-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557653" comment="python36-devel-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557654" comment="python36-doc-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557655" comment="python36-testsuite-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557656" comment="python36-tk-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557657" comment="python36-tools-3.6.8-6.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1152</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1152" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1152" ref_url="https://www.suse.com/security/cve/CVE-2012-1152" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1000-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0319-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html" source="SUSE-SU"/>
    <description>
    Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow remote attackers to cause a denial of service (process crash) via format string specifiers in a (1) YAML stream to the Load function, (2) YAML node to the load_node function, (3) YAML mapping to the load_mapping function, or (4) YAML sequence to the load_sequence function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1152/">CVE-2012-1152</cve>
	<bugzilla href="https://bugzilla.suse.com/751503">SUSE bug 751503</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009109959" comment="perl-YAML-LibYAML-0.38-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141773" comment="perl-YAML-LibYAML-0.38-7.61 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1162</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1162" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1162" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1162" ref_url="https://www.suse.com/security/cve/CVE-2012-1162" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1162/">CVE-2012-1162</cve>
	<bugzilla href="https://bugzilla.suse.com/751829">SUSE bug 751829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751830">SUSE bug 751830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141037" comment="libzip2-0.11.1-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141753" comment="libzip2-0.11.1-4.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142037" comment="libzip2-0.11.1-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144966" comment="libzip-devel-0.11.1-4.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145173" comment="libzip-devel-0.11.1-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145351" comment="libzip-devel-0.11.1-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164531" comment="libzip2-0.11.1-13.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164545" comment="libzip-devel-0.11.1-13.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1163</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1163" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1163" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1163" ref_url="https://www.suse.com/security/cve/CVE-2012-1163" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0416-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1163/">CVE-2012-1163</cve>
	<bugzilla href="https://bugzilla.suse.com/751829">SUSE bug 751829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751830">SUSE bug 751830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141037" comment="libzip2-0.11.1-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141753" comment="libzip2-0.11.1-4.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142037" comment="libzip2-0.11.1-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144966" comment="libzip-devel-0.11.1-4.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145173" comment="libzip-devel-0.11.1-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145351" comment="libzip-devel-0.11.1-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164531" comment="libzip2-0.11.1-13.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009164545" comment="libzip-devel-0.11.1-13.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1165</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1165" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1165" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1165" ref_url="https://www.suse.com/security/cve/CVE-2012-1165" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000072.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000073.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0474-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1165/">CVE-2012-1165</cve>
	<bugzilla href="https://bugzilla.suse.com/749210">SUSE bug 749210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/749213">SUSE bug 749213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751946">SUSE bug 751946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754640">SUSE bug 754640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1173</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1173" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1173" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1173" ref_url="https://www.suse.com/security/cve/CVE-2012-1173" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000086.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0539-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00046.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1173/">CVE-2012-1173</cve>
	<bugzilla href="https://bugzilla.suse.com/753362">SUSE bug 753362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/767852">SUSE bug 767852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335904" comment="libtiff5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335905" comment="libtiff5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1174</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1174" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1174" ref_url="https://www.suse.com/security/cve/CVE-2012-1174" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0383-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-03/msg00030.html" source="SUSE-SU"/>
    <description>
    The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1174/">CVE-2012-1174</cve>
	<bugzilla href="https://bugzilla.suse.com/752281">SUSE bug 752281</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140954" comment="libsystemd0-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140955" comment="libsystemd0-32bit-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140956" comment="libudev1-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140957" comment="libudev1-32bit-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140958" comment="systemd-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140959" comment="systemd-32bit-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140960" comment="systemd-bash-completion-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140961" comment="systemd-sysvinit-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140962" comment="udev-228-117.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140954" comment="libsystemd0-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140956" comment="libudev1-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140958" comment="systemd-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140960" comment="systemd-bash-completion-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140961" comment="systemd-sysvinit-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140962" comment="udev-228-117.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141527" comment="libgudev-1_0-0-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141528" comment="libgudev-1_0-0-32bit-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141529" comment="libudev1-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141530" comment="libudev1-32bit-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141531" comment="systemd-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141532" comment="systemd-32bit-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141533" comment="systemd-bash-completion-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141534" comment="systemd-sysvinit-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141535" comment="udev-210-44.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141971" comment="libgudev-1_0-0-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141972" comment="libgudev-1_0-0-32bit-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141973" comment="libudev1-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141974" comment="libudev1-32bit-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141975" comment="systemd-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141976" comment="systemd-32bit-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141977" comment="systemd-bash-completion-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141978" comment="systemd-sysvinit-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141979" comment="udev-210-83.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144865" comment="libgudev-1_0-devel-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144866" comment="libudev-devel-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144867" comment="systemd-devel-210-44.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144868" comment="typelib-1_0-GUdev-1_0-210-44.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145123" comment="libgudev-1_0-devel-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145124" comment="libudev-devel-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145125" comment="systemd-devel-210-83.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145126" comment="typelib-1_0-GUdev-1_0-210-83.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145333" comment="libudev-devel-228-117.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145334" comment="systemd-devel-228-117.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159206" comment="libsystemd0-228-142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159207" comment="libsystemd0-32bit-228-142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159208" comment="libudev1-228-142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159209" comment="libudev1-32bit-228-142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159210" comment="systemd-228-142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159211" comment="systemd-32bit-228-142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159212" comment="systemd-bash-completion-228-142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159213" comment="systemd-sysvinit-228-142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159214" comment="udev-228-142.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159828" comment="libudev-devel-228-142.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159829" comment="systemd-devel-228-142.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512486" comment="libsystemd0-228-150.49.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512487" comment="libsystemd0-32bit-228-150.49.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512488" comment="libudev1-228-150.49.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512489" comment="libudev1-32bit-228-150.49.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512490" comment="systemd-228-150.49.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512491" comment="systemd-32bit-228-150.49.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512492" comment="systemd-bash-completion-228-150.49.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512493" comment="systemd-sysvinit-228-150.49.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512494" comment="udev-228-150.49.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513237" comment="libsystemd0-228-155.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513238" comment="libsystemd0-32bit-228-155.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513239" comment="libudev1-228-155.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513240" comment="libudev1-32bit-228-155.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513241" comment="systemd-228-155.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513242" comment="systemd-32bit-228-155.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513243" comment="systemd-bash-completion-228-155.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513244" comment="systemd-sysvinit-228-155.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513245" comment="udev-228-155.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513836" comment="libudev-devel-228-150.49.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513837" comment="systemd-devel-228-150.49.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514201" comment="libudev-devel-228-155.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514202" comment="systemd-devel-228-155.21 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1182" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1182" ref_url="https://www.suse.com/security/cve/CVE-2012-1182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0500-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0501-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0501-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0504-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0507-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0508-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00012.html" source="SUSE-SU"/>
    <description>
    The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1182/">CVE-2012-1182</cve>
	<bugzilla href="https://bugzilla.suse.com/747934">SUSE bug 747934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/752797">SUSE bug 752797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754443">SUSE bug 754443</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1185</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1185" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1185" ref_url="https://www.suse.com/security/cve/CVE-2012-1185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000150.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0692-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-1185/">CVE-2012-1185</cve>
	<bugzilla href="https://bugzilla.suse.com/752879">SUSE bug 752879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102630" comment="ImageMagick-devel-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102636" comment="libMagick++-devel-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102641" comment="perl-PerlMagick-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102637" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102638" comment="libMagickCore-6_Q16-1-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102637" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102640" comment="libMagickWand-6_Q16-1-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102638" comment="libMagickCore-6_Q16-1-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102640" comment="libMagickWand-6_Q16-1-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130985" comment="libMagickCore-6_Q16-1-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130986" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130987" comment="libMagickWand-6_Q16-1-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130986" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131744" comment="ImageMagick-devel-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131745" comment="libMagick++-devel-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131746" comment="perl-PerlMagick-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130985" comment="libMagickCore-6_Q16-1-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130987" comment="libMagickWand-6_Q16-1-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141198" comment="libMagickCore-6_Q16-1-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141199" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141200" comment="libMagickWand-6_Q16-1-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141199" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144703" comment="ImageMagick-devel-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144704" comment="libMagick++-devel-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144705" comment="perl-PerlMagick-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143221" comment="libMagickCore-6_Q16-1-6.8.8.1-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143222" comment="libMagickWand-6_Q16-1-6.8.8.1-5.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156376" comment="libMagickCore-6_Q16-1-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156377" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156378" comment="libMagickWand-6_Q16-1-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156377" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156379" comment="ImageMagick-devel-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156380" comment="libMagick++-devel-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156381" comment="perl-PerlMagick-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156376" comment="libMagickCore-6_Q16-1-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156378" comment="libMagickWand-6_Q16-1-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512008" comment="libMagickCore-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512009" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512010" comment="libMagickWand-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512009" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513618" comment="ImageMagick-devel-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513619" comment="libMagick++-devel-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513620" comment="perl-PerlMagick-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512008" comment="libMagickCore-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512010" comment="libMagickWand-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512669" comment="ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512670" comment="ImageMagick-config-6-upstream-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512671" comment="libMagickCore-6_Q16-1-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512672" comment="libMagickWand-6_Q16-1-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513894" comment="ImageMagick-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512669" comment="ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512670" comment="ImageMagick-config-6-upstream-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513895" comment="ImageMagick-devel-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513896" comment="libMagick++-6_Q16-3-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513897" comment="libMagick++-devel-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513898" comment="perl-PerlMagick-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513894" comment="ImageMagick-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513896" comment="libMagick++-6_Q16-3-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514265" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1186</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1186" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1186" ref_url="https://www.suse.com/security/cve/CVE-2012-1186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000149.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000150.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0692-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-1186/">CVE-2012-1186</cve>
	<bugzilla href="https://bugzilla.suse.com/752879">SUSE bug 752879</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102630" comment="ImageMagick-devel-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102636" comment="libMagick++-devel-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102641" comment="perl-PerlMagick-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102637" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102628" comment="ImageMagick-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102634" comment="libMagick++-6_Q16-3-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102638" comment="libMagickCore-6_Q16-1-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102637" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102640" comment="libMagickWand-6_Q16-1-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102638" comment="libMagickCore-6_Q16-1-6.8.8.1-8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102640" comment="libMagickWand-6_Q16-1-6.8.8.1-8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130985" comment="libMagickCore-6_Q16-1-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130986" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130987" comment="libMagickWand-6_Q16-1-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130986" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130983" comment="ImageMagick-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131744" comment="ImageMagick-devel-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130984" comment="libMagick++-6_Q16-3-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131745" comment="libMagick++-devel-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131746" comment="perl-PerlMagick-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130985" comment="libMagickCore-6_Q16-1-6.8.8.1-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130987" comment="libMagickWand-6_Q16-1-6.8.8.1-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141198" comment="libMagickCore-6_Q16-1-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141199" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141200" comment="libMagickWand-6_Q16-1-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141199" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141196" comment="ImageMagick-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144703" comment="ImageMagick-devel-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141197" comment="libMagick++-6_Q16-3-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144704" comment="libMagick++-devel-6.8.8.1-5.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144705" comment="perl-PerlMagick-6.8.8.1-5.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143221" comment="libMagickCore-6_Q16-1-6.8.8.1-5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143222" comment="libMagickWand-6_Q16-1-6.8.8.1-5.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156376" comment="libMagickCore-6_Q16-1-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156377" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156378" comment="libMagickWand-6_Q16-1-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156377" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156374" comment="ImageMagick-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156379" comment="ImageMagick-devel-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156375" comment="libMagick++-6_Q16-3-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156380" comment="libMagick++-devel-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156381" comment="perl-PerlMagick-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156376" comment="libMagickCore-6_Q16-1-6.8.8.1-70.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156378" comment="libMagickWand-6_Q16-1-6.8.8.1-70.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512008" comment="libMagickCore-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512009" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512010" comment="libMagickWand-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512009" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512006" comment="ImageMagick-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513618" comment="ImageMagick-devel-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512007" comment="libMagick++-6_Q16-3-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513619" comment="libMagick++-devel-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513620" comment="perl-PerlMagick-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512008" comment="libMagickCore-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512010" comment="libMagickWand-6_Q16-1-6.8.8.1-71.85.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512669" comment="ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512670" comment="ImageMagick-config-6-upstream-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512671" comment="libMagickCore-6_Q16-1-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512672" comment="libMagickWand-6_Q16-1-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513894" comment="ImageMagick-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512669" comment="ImageMagick-config-6-SUSE-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512670" comment="ImageMagick-config-6-upstream-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513895" comment="ImageMagick-devel-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513896" comment="libMagick++-6_Q16-3-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513897" comment="libMagick++-devel-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513898" comment="perl-PerlMagick-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513894" comment="ImageMagick-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513896" comment="libMagick++-6_Q16-3-6.8.8.1-71.126.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514265" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-71.126.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1457</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1457" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1457" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1457" ref_url="https://www.suse.com/security/cve/CVE-2012-1457" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000176.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1457/">CVE-2012-1457</cve>
	<bugzilla href="https://bugzilla.suse.com/753611">SUSE bug 753611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/767574">SUSE bug 767574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009109618" comment="clamav-0.98.7-13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140489" comment="clamav-0.99.2-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141235" comment="clamav-0.98.4-1.46 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157660" comment="clamav-0.99.2-32.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512064" comment="clamav-0.100.2-33.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512760" comment="clamav-0.101.3-1.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1458</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1458" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1458" ref_url="https://www.suse.com/security/cve/CVE-2012-1458" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000176.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1458/">CVE-2012-1458</cve>
	<bugzilla href="https://bugzilla.suse.com/753613">SUSE bug 753613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/767574">SUSE bug 767574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009109618" comment="clamav-0.98.7-13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140489" comment="clamav-0.99.2-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141235" comment="clamav-0.98.4-1.46 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157660" comment="clamav-0.99.2-32.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512064" comment="clamav-0.100.2-33.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512760" comment="clamav-0.101.3-1.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1459</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1459" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1459" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1459" ref_url="https://www.suse.com/security/cve/CVE-2012-1459" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000176.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0833-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00002.html" source="SUSE-SU"/>
    <description>
    The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1459/">CVE-2012-1459</cve>
	<bugzilla href="https://bugzilla.suse.com/753610">SUSE bug 753610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/767574">SUSE bug 767574</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009109618" comment="clamav-0.98.7-13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140489" comment="clamav-0.99.2-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141235" comment="clamav-0.98.4-1.46 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157660" comment="clamav-0.99.2-32.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512064" comment="clamav-0.100.2-33.18.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512760" comment="clamav-0.101.3-1.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1531</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1531" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1531" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1531" ref_url="https://www.suse.com/security/cve/CVE-2012-1531" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and JavaFX 2.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1531/">CVE-2012-1531</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1532</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1532" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1532" ref_url="https://www.suse.com/security/cve/CVE-2012-1532" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier and 6 Update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1532/">CVE-2012-1532</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1533</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1533" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1533" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1533" ref_url="https://www.suse.com/security/cve/CVE-2012-1533" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-3159.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1533/">CVE-2012-1533</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1535</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1535" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1535" ref_url="https://www.suse.com/security/cve/CVE-2012-1535" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1001-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1001-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0362-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00027.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1535/">CVE-2012-1535</cve>
	<bugzilla href="https://bugzilla.suse.com/775986">SUSE bug 775986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1541</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1541" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1541" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1541" ref_url="https://www.suse.com/security/cve/CVE-2012-1541" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an interaction error in between the JRE plug-in for WebKit-based browsers and the Javascript engine, which allows remote attackers to execute arbitrary code by modifying DOM nodes that contain applet elements in a way that triggers an incorrect reference count and a use after free.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1541/">CVE-2012-1541</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/818972">SUSE bug 818972</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1569</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1569" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1569" ref_url="https://www.suse.com/security/cve/CVE-2012-1569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0620-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00021.html" source="SUSE-SU"/>
    <description>
    The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1569/">CVE-2012-1569</cve>
	<bugzilla href="https://bugzilla.suse.com/752193">SUSE bug 752193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/753301">SUSE bug 753301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924966">SUSE bug 924966</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114254" comment="libgnutls-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114256" comment="libgnutls-openssl-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114260" comment="libgnutlsxx-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114261" comment="libgnutlsxx28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143200" comment="libgnutls-openssl27-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144859" comment="libgnutls-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144860" comment="libgnutls-openssl-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144861" comment="libgnutlsxx-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144862" comment="libgnutlsxx28-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159005" comment="libgnutls-openssl27-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159806" comment="libgnutls-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159807" comment="libgnutls-openssl-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159808" comment="libgnutlsxx-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159809" comment="libgnutlsxx28-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512898" comment="libgnutls-openssl27-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513726" comment="libgnutls-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513727" comment="libgnutls-openssl-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513728" comment="libgnutlsxx-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513729" comment="libgnutlsxx28-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1571</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1571" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1571" ref_url="https://www.suse.com/security/cve/CVE-2012-1571" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0488-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-04/msg00028.html" source="SUSE-SU"/>
    <description>
    file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1571/">CVE-2012-1571</cve>
	<bugzilla href="https://bugzilla.suse.com/753303">SUSE bug 753303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/883306">SUSE bug 883306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/884986">SUSE bug 884986</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987530">SUSE bug 987530</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103558" comment="file-devel-5.19-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144734" comment="file-devel-5.19-2.149 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513652" comment="file-devel-5.22-10.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513945" comment="file-devel-5.22-10.12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103557" comment="file-5.19-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103559" comment="file-magic-5.19-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103561" comment="libmagic1-5.19-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103560" comment="libmagic1-32bit-5.19-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103557" comment="file-5.19-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103559" comment="file-magic-5.19-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103561" comment="libmagic1-5.19-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141330" comment="file-5.19-2.149 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141331" comment="file-magic-5.19-2.149 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141332" comment="libmagic1-5.19-2.149 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141333" comment="libmagic1-32bit-5.19-2.149 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143174" comment="file-5.19-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143175" comment="file-magic-5.19-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143176" comment="libmagic1-5.19-2.32 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141333" comment="libmagic1-32bit-5.19-2.149 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512122" comment="file-5.22-10.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512123" comment="file-magic-5.22-10.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512124" comment="libmagic1-5.22-10.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512125" comment="libmagic1-32bit-5.22-10.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512841" comment="file-5.22-10.12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512842" comment="file-magic-5.22-10.12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512843" comment="libmagic1-5.22-10.12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512844" comment="libmagic1-32bit-5.22-10.12.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1573</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1573" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1573" ref_url="https://www.suse.com/security/cve/CVE-2012-1573" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0620-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00021.html" source="SUSE-SU"/>
    <description>
    gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1573/">CVE-2012-1573</cve>
	<bugzilla href="https://bugzilla.suse.com/752193">SUSE bug 752193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754223">SUSE bug 754223</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114257" comment="libgnutls-openssl27-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114253" comment="gnutls-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114258" comment="libgnutls28-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114259" comment="libgnutls28-32bit-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114254" comment="libgnutls-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114256" comment="libgnutls-openssl-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114260" comment="libgnutlsxx-devel-3.2.15-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114261" comment="libgnutlsxx28-3.2.15-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141409" comment="gnutls-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143200" comment="libgnutls-openssl27-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141410" comment="libgnutls28-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141411" comment="libgnutls28-32bit-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144859" comment="libgnutls-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144860" comment="libgnutls-openssl-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144861" comment="libgnutlsxx-devel-3.2.15-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144862" comment="libgnutlsxx28-3.2.15-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159005" comment="libgnutls-openssl27-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159004" comment="gnutls-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159006" comment="libgnutls28-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159007" comment="libgnutls28-32bit-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159806" comment="libgnutls-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159807" comment="libgnutls-openssl-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159808" comment="libgnutlsxx-devel-3.3.27-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159809" comment="libgnutlsxx28-3.3.27-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512177" comment="gnutls-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512898" comment="libgnutls-openssl27-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512178" comment="libgnutls28-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512179" comment="libgnutls28-32bit-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513726" comment="libgnutls-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513727" comment="libgnutls-openssl-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513728" comment="libgnutlsxx-devel-3.3.27-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513729" comment="libgnutlsxx28-3.3.27-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1583</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1583" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1583" ref_url="https://www.suse.com/security/cve/CVE-2012-1583" source="SUSE CVE"/>
    <description>
    Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1583/">CVE-2012-1583</cve>
	<bugzilla href="https://bugzilla.suse.com/757707">SUSE bug 757707</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1586</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1586" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1586" ref_url="https://www.suse.com/security/cve/CVE-2012-1586" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-April/000098.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0607-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00011.html" source="SUSE-SU"/>
    <description>
    mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-1586/">CVE-2012-1586</cve>
	<bugzilla href="https://bugzilla.suse.com/754443">SUSE bug 754443</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140488" comment="cifs-utils-6.5-8.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141234" comment="cifs-utils-6.4-3.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141851" comment="cifs-utils-6.4-6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144723" comment="cifs-utils-devel-6.4-3.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145019" comment="cifs-utils-devel-6.4-6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145212" comment="cifs-utils-devel-6.5-8.9 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512063" comment="cifs-utils-6.5-9.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512759" comment="cifs-utils-6.9-9.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513638" comment="cifs-utils-devel-6.5-9.3.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513927" comment="cifs-utils-devel-6.9-9.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1601</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1601" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1601" ref_url="https://www.suse.com/security/cve/CVE-2012-1601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVM_CREATE_IRQCHIP ioctl call after a virtual CPU already exists.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1601/">CVE-2012-1601</cve>
	<bugzilla href="https://bugzilla.suse.com/754898">SUSE bug 754898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1616</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1616" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1616" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1616" ref_url="https://www.suse.com/security/cve/CVE-2012-1616" source="SUSE CVE"/>
    <description>
    Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1616/">CVE-2012-1616</cve>
	<bugzilla href="https://bugzilla.suse.com/768322">SUSE bug 768322</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141211" comment="argyllcms-1.6.3-1.179 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142077" comment="argyllcms-1.6.3-3.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1667</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1667" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1667" ref_url="https://www.suse.com/security/cve/CVE-2012-1667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0741-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-4" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-5" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0741-6" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0722-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-1667/">CVE-2012-1667</cve>
	<bugzilla href="https://bugzilla.suse.com/765315">SUSE bug 765315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1682</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1682" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1682" ref_url="https://www.suse.com/security/cve/CVE-2012-1682" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1148-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00019.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136.  NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "XMLDecoder security issue via ClassFinder."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1682/">CVE-2012-1682</cve>
	<bugzilla href="https://bugzilla.suse.com/777499">SUSE bug 777499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1711</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1711" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1711" ref_url="https://www.suse.com/security/cve/CVE-2012-1711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to CORBA.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-1711/">CVE-2012-1711</cve>
	<bugzilla href="https://bugzilla.suse.com/766802">SUSE bug 766802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1713</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1713" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1713" ref_url="https://www.suse.com/security/cve/CVE-2012-1713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1177-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-November/000293.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1713/">CVE-2012-1713</cve>
	<bugzilla href="https://bugzilla.suse.com/766802">SUSE bug 766802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1716</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1716" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1716" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1716" ref_url="https://www.suse.com/security/cve/CVE-2012-1716" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1716/">CVE-2012-1716</cve>
	<bugzilla href="https://bugzilla.suse.com/766802">SUSE bug 766802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1717</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1717" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1717" ref_url="https://www.suse.com/security/cve/CVE-2012-1717" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1177-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-November/000293.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1717/">CVE-2012-1717</cve>
	<bugzilla href="https://bugzilla.suse.com/766802">SUSE bug 766802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1718</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1718" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1718" ref_url="https://www.suse.com/security/cve/CVE-2012-1718" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1177-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-November/000293.html" source="SUSE-SU"/>
		<reference ref_id="TID7011405" ref_url="https://www.suse.com/support/kb/doc/?id=7011405" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect availability via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1718/">CVE-2012-1718</cve>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1719</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1719" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1719" ref_url="https://www.suse.com/security/cve/CVE-2012-1719" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1177-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1177-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00036.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-November/000293.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1719/">CVE-2012-1719</cve>
	<bugzilla href="https://bugzilla.suse.com/766802">SUSE bug 766802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1721</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1721" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1721" ref_url="https://www.suse.com/security/cve/CVE-2012-1721" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1721/">CVE-2012-1721</cve>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1722</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1722" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1722" ref_url="https://www.suse.com/security/cve/CVE-2012-1722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1722/">CVE-2012-1722</cve>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1723</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1723" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1723" ref_url="https://www.suse.com/security/cve/CVE-2012-1723" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="TID7011405" ref_url="https://www.suse.com/support/kb/doc/?id=7011405" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1723/">CVE-2012-1723</cve>
	<bugzilla href="https://bugzilla.suse.com/766802">SUSE bug 766802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1724</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1724" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1724" ref_url="https://www.suse.com/security/cve/CVE-2012-1724" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="TID7011405" ref_url="https://www.suse.com/support/kb/doc/?id=7011405" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1724/">CVE-2012-1724</cve>
	<bugzilla href="https://bugzilla.suse.com/766802">SUSE bug 766802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1725</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1725" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1725" ref_url="https://www.suse.com/security/cve/CVE-2012-1725" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0762-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1265-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="TID7011405" ref_url="https://www.suse.com/support/kb/doc/?id=7011405" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0828-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1725/">CVE-2012-1725</cve>
	<bugzilla href="https://bugzilla.suse.com/766802">SUSE bug 766802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1726</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1726" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1726" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1726" ref_url="https://www.suse.com/security/cve/CVE-2012-1726" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-06"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1726/">CVE-2012-1726</cve>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1823</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1823" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1823" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1823" ref_url="https://www.suse.com/security/cve/CVE-2012-1823" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0598-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00002.html" source="SUSE-SU"/>
    <description>
    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-1823/">CVE-2012-1823</cve>
	<bugzilla href="https://bugzilla.suse.com/760536">SUSE bug 760536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/761631">SUSE bug 761631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/850694">SUSE bug 850694</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1937</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1937" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1937" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1937" ref_url="https://www.suse.com/security/cve/CVE-2012-1937" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1937/">CVE-2012-1937</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1938</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1938" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1938" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1938" ref_url="https://www.suse.com/security/cve/CVE-2012-1938" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1938/">CVE-2012-1938</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121940" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1940</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1940" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1940" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1940" ref_url="https://www.suse.com/security/cve/CVE-2012-1940" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by changing the size of a container of absolutely positioned elements in a column.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1940/">CVE-2012-1940</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1941</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1941" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1941" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1941" ref_url="https://www.suse.com/security/cve/CVE-2012-1941" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsHTMLReflowState::CalculateHypotheticalBox function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code by resizing a window displaying absolutely positioned and relatively positioned elements in nested columns.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1941/">CVE-2012-1941</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1944</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1944" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1944" ref_url="https://www.suse.com/security/cve/CVE-2012-1944" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1944/">CVE-2012-1944</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1945</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1945" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1945" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1945" ref_url="https://www.suse.com/security/cve/CVE-2012-1945" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1945/">CVE-2012-1945</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1946</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1946" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1946" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1946" ref_url="https://www.suse.com/security/cve/CVE-2012-1946" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 might allow remote attackers to execute arbitrary code via document changes involving replacement or insertion of a node.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1946/">CVE-2012-1946</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1947</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1947" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1947" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1947" ref_url="https://www.suse.com/security/cve/CVE-2012-1947" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0746-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the utf16_to_isolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code via vectors that trigger a character-set conversion failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1947/">CVE-2012-1947</cve>
	<bugzilla href="https://bugzilla.suse.com/765204">SUSE bug 765204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1948</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1948" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1948" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1948" ref_url="https://www.suse.com/security/cve/CVE-2012-1948" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1948/">CVE-2012-1948</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1949</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1949" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1949" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1949" ref_url="https://www.suse.com/security/cve/CVE-2012-1949" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1949/">CVE-2012-1949</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1950</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1950" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1950" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1950" ref_url="https://www.suse.com/security/cve/CVE-2012-1950" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
    <description>
    The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1950/">CVE-2012-1950</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1951</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1951" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1951" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1951" ref_url="https://www.suse.com/security/cve/CVE-2012-1951" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1951/">CVE-2012-1951</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1952</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1952" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1952" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1952" ref_url="https://www.suse.com/security/cve/CVE-2012-1952" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1952/">CVE-2012-1952</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1953</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1953" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1953" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1953" ref_url="https://www.suse.com/security/cve/CVE-2012-1953" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1953/">CVE-2012-1953</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1954</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1954" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1954" ref_url="https://www.suse.com/security/cve/CVE-2012-1954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1954/">CVE-2012-1954</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1955</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1955" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1955" ref_url="https://www.suse.com/security/cve/CVE-2012-1955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1955/">CVE-2012-1955</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1956</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1956" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1956" ref_url="https://www.suse.com/security/cve/CVE-2012-1956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1956/">CVE-2012-1956</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1957</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1957" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1957" ref_url="https://www.suse.com/security/cve/CVE-2012-1957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1957/">CVE-2012-1957</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1958</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1958" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1958" ref_url="https://www.suse.com/security/cve/CVE-2012-1958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1958/">CVE-2012-1958</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1959</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1959" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1959" ref_url="https://www.suse.com/security/cve/CVE-2012-1959" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1959/">CVE-2012-1959</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1960</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1960" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1960" ref_url="https://www.suse.com/security/cve/CVE-2012-1960" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 might allow remote attackers to obtain sensitive information from process memory via a crafted color profile that triggers an out-of-bounds read operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1960/">CVE-2012-1960</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1961</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1961" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1961" ref_url="https://www.suse.com/security/cve/CVE-2012-1961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1961/">CVE-2012-1961</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1962</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1962" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1962" ref_url="https://www.suse.com/security/cve/CVE-2012-1962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1962/">CVE-2012-1962</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1963</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1963" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1963" ref_url="https://www.suse.com/security/cve/CVE-2012-1963" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1963/">CVE-2012-1963</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1965</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1965" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1965" ref_url="https://www.suse.com/security/cve/CVE-2012-1965" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1965/">CVE-2012-1965</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1966</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1966" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1966" ref_url="https://www.suse.com/security/cve/CVE-2012-1966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1966/">CVE-2012-1966</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1967</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1967" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1967" ref_url="https://www.suse.com/security/cve/CVE-2012-1967" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0895-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0896-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0899-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0924-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0935-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1967/">CVE-2012-1967</cve>
	<bugzilla href="https://bugzilla.suse.com/771583">SUSE bug 771583</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1970</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1970" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1970" ref_url="https://www.suse.com/security/cve/CVE-2012-1970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1970/">CVE-2012-1970</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1972</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1972" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1972" ref_url="https://www.suse.com/security/cve/CVE-2012-1972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1972/">CVE-2012-1972</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1973</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1973" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1973" ref_url="https://www.suse.com/security/cve/CVE-2012-1973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1973/">CVE-2012-1973</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1974</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1974" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1974" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1974" ref_url="https://www.suse.com/security/cve/CVE-2012-1974" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1974/">CVE-2012-1974</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1975</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1975" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1975" ref_url="https://www.suse.com/security/cve/CVE-2012-1975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1975/">CVE-2012-1975</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1976</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-1976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1976" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-1976" ref_url="https://www.suse.com/security/cve/CVE-2012-1976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1976/">CVE-2012-1976</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2034</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2034" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2034" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2034" ref_url="https://www.suse.com/security/cve/CVE-2012-2034" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0723-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-2034/">CVE-2012-2034</cve>
	<bugzilla href="https://bugzilla.suse.com/766241">SUSE bug 766241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2035</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2035" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2035" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2035" ref_url="https://www.suse.com/security/cve/CVE-2012-2035" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0723-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-2035/">CVE-2012-2035</cve>
	<bugzilla href="https://bugzilla.suse.com/766241">SUSE bug 766241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2036</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2036" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2036" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2036" ref_url="https://www.suse.com/security/cve/CVE-2012-2036" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0723-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-2036/">CVE-2012-2036</cve>
	<bugzilla href="https://bugzilla.suse.com/766241">SUSE bug 766241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2037</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2037" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2037" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2037" ref_url="https://www.suse.com/security/cve/CVE-2012-2037" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0723-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2034.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-2037/">CVE-2012-2037</cve>
	<bugzilla href="https://bugzilla.suse.com/766241">SUSE bug 766241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2038</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2038" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2038" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2038" ref_url="https://www.suse.com/security/cve/CVE-2012-2038" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0723-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2038/">CVE-2012-2038</cve>
	<bugzilla href="https://bugzilla.suse.com/766241">SUSE bug 766241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2039</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2039" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2039" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2039" ref_url="https://www.suse.com/security/cve/CVE-2012-2039" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0723-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-2039/">CVE-2012-2039</cve>
	<bugzilla href="https://bugzilla.suse.com/766241">SUSE bug 766241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2040</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2040" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2040" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2040" ref_url="https://www.suse.com/security/cve/CVE-2012-2040" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0724-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0723-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html" source="SUSE-SU"/>
    <description>
    Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows local users to gain privileges via a Trojan horse executable file in an unspecified directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-2040/">CVE-2012-2040</cve>
	<bugzilla href="https://bugzilla.suse.com/766241">SUSE bug 766241</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2088</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2088" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2088" ref_url="https://www.suse.com/security/cve/CVE-2012-2088" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0829-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00009.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion between signed and unsigned types, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2088/">CVE-2012-2088</cve>
	<bugzilla href="https://bugzilla.suse.com/767854">SUSE bug 767854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335904" comment="libtiff5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335905" comment="libtiff5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2100</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2100" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2100" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2100" ref_url="https://www.suse.com/security/cve/CVE-2012-2100" source="SUSE CVE"/>
    <description>
    The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2100/">CVE-2012-2100</cve>
	<bugzilla href="https://bugzilla.suse.com/757278">SUSE bug 757278</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2110</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2110" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2110" ref_url="https://www.suse.com/security/cve/CVE-2012-2110" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0623-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1149-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021456" ref_url="https://www.suse.com/support/kb/doc/?id=7021456" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021736" ref_url="https://www.suse.com/support/kb/doc/?id=7021736" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021874" ref_url="https://www.suse.com/support/kb/doc/?id=7021874" source="SUSE-SU"/>
		<reference ref_id="TID7021991" ref_url="https://www.suse.com/support/kb/doc/?id=7021991" source="SUSE-SU"/>
		<reference ref_id="TID7022023" ref_url="https://www.suse.com/support/kb/doc/?id=7022023" source="SUSE-SU"/>
		<reference ref_id="TID7022090" ref_url="https://www.suse.com/support/kb/doc/?id=7022090" source="SUSE-SU"/>
		<reference ref_id="TID7022091" ref_url="https://www.suse.com/support/kb/doc/?id=7022091" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
    <description>
    The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2110/">CVE-2012-2110</cve>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778825">SUSE bug 778825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2111</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2111" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2111" ref_url="https://www.suse.com/security/cve/CVE-2012-2111" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0575-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0591-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0583-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00001.html" source="SUSE-SU"/>
    <description>
    The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2111/">CVE-2012-2111</cve>
	<bugzilla href="https://bugzilla.suse.com/754443">SUSE bug 754443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/757576">SUSE bug 757576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2113</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2113" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2113" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2113" ref_url="https://www.suse.com/security/cve/CVE-2012-2113" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0829-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00009.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2113/">CVE-2012-2113</cve>
	<bugzilla href="https://bugzilla.suse.com/767852">SUSE bug 767852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009335904" comment="libtiff5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335905" comment="libtiff5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334077" comment="tiff is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2119</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2119" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2119" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2119" ref_url="https://www.suse.com/security/cve/CVE-2012-2119" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0781-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service (crash) via a long descriptor with a long vector length.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2119/">CVE-2012-2119</cve>
	<bugzilla href="https://bugzilla.suse.com/758243">SUSE bug 758243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2121</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2121" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2121" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2121" ref_url="https://www.suse.com/security/cve/CVE-2012-2121" source="SUSE CVE"/>
    <description>
    The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2121/">CVE-2012-2121</cve>
	<bugzilla href="https://bugzilla.suse.com/758355">SUSE bug 758355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2123</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2123" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2123" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2123" ref_url="https://www.suse.com/security/cve/CVE-2012-2123" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0781-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2123/">CVE-2012-2123</cve>
	<bugzilla href="https://bugzilla.suse.com/758260">SUSE bug 758260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2127</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2127" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2127" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2127" ref_url="https://www.suse.com/security/cve/CVE-2012-2127" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0689-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00001.html" source="SUSE-SU"/>
    <description>
    fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2127/">CVE-2012-2127</cve>
	<bugzilla href="https://bugzilla.suse.com/757783">SUSE bug 757783</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2131</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2131" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2131" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2131" ref_url="https://www.suse.com/security/cve/CVE-2012-2131" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
    <description>
    Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2131/">CVE-2012-2131</cve>
	<bugzilla href="https://bugzilla.suse.com/758060">SUSE bug 758060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2133</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2133" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2133" ref_url="https://www.suse.com/security/cve/CVE-2012-2133" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0616-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0689-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2133/">CVE-2012-2133</cve>
	<bugzilla href="https://bugzilla.suse.com/758532">SUSE bug 758532</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2136</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2136" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2136" ref_url="https://www.suse.com/security/cve/CVE-2012-2136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0781-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0799-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0812-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1439-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00002.html" source="SUSE-SU"/>
    <description>
    The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2136/">CVE-2012-2136</cve>
	<bugzilla href="https://bugzilla.suse.com/765320">SUSE bug 765320</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2137</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2137" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2137" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2137" ref_url="https://www.suse.com/security/cve/CVE-2012-2137" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Signaled Interrupts (MSI), irq routing entries, and an incorrect check by the setup_routing_entry function before invoking the kvm_set_irq function.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2137/">CVE-2012-2137</cve>
	<bugzilla href="https://bugzilla.suse.com/767612">SUSE bug 767612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2141</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2141" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2141" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2141" ref_url="https://www.suse.com/security/cve/CVE-2012-2141" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0887-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000184.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000185.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0659-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00042.html" source="SUSE-SU"/>
    <description>
    Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2141/">CVE-2012-2141</cve>
	<bugzilla href="https://bugzilla.suse.com/759352">SUSE bug 759352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826684">SUSE bug 826684</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144971" comment="net-snmp-devel-5.7.2.1-3.8 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145174" comment="net-snmp-devel-5.7.3-4.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513860" comment="net-snmp-devel-5.7.3-6.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514221" comment="net-snmp-devel-5.7.3-6.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140934" comment="libsnmp30-5.7.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140935" comment="libsnmp30-32bit-5.7.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140936" comment="net-snmp-5.7.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140937" comment="perl-SNMP-5.7.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140938" comment="snmp-mibs-5.7.3-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140934" comment="libsnmp30-5.7.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140936" comment="net-snmp-5.7.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140937" comment="perl-SNMP-5.7.3-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140938" comment="snmp-mibs-5.7.3-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141682" comment="libsnmp30-5.7.2.1-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141683" comment="libsnmp30-32bit-5.7.2.1-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141684" comment="net-snmp-5.7.2.1-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141685" comment="perl-SNMP-5.7.2.1-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141686" comment="snmp-mibs-5.7.2.1-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512467" comment="libsnmp30-5.7.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512468" comment="libsnmp30-32bit-5.7.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512469" comment="net-snmp-5.7.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512470" comment="perl-SNMP-5.7.3-6.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512471" comment="snmp-mibs-5.7.3-6.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513221" comment="libsnmp30-5.7.3-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513222" comment="libsnmp30-32bit-5.7.3-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513223" comment="net-snmp-5.7.3-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513224" comment="perl-SNMP-5.7.3-6.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513225" comment="snmp-mibs-5.7.3-6.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2142</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2142" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2142" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2142" ref_url="https://www.suse.com/security/cve/CVE-2012-2142" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1371-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00049.html" source="SUSE-SU"/>
    <description>
    The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-2142/">CVE-2012-2142</cve>
	<bugzilla href="https://bugzilla.suse.com/1133493">SUSE bug 1133493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/834475">SUSE bug 834475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/834476">SUSE bug 834476</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334136" comment="evince is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336165" comment="evince-browser-plugin is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336166" comment="evince-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336167" comment="evince-plugin-djvudocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336168" comment="evince-plugin-dvidocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336169" comment="evince-plugin-pdfdocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336170" comment="evince-plugin-psdocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336171" comment="evince-plugin-tiffdocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336172" comment="evince-plugin-xpsdocument is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336173" comment="libevdocument3-4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336174" comment="libevview3-3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336175" comment="nautilus-evince is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337738" comment="libpoppler-glib8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337739" comment="libpoppler60 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337407" comment="poppler-tools is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334136" comment="evince is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336166" comment="evince-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336173" comment="libevdocument3-4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336174" comment="libevview3-3 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336176" comment="typelib-1_0-EvinceDocument-3_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336177" comment="typelib-1_0-EvinceView-3_0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334136" comment="evince is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336166" comment="evince-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336173" comment="libevdocument3-4 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336174" comment="libevview3-3 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336178" comment="evince-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336176" comment="typelib-1_0-EvinceDocument-3_0 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336177" comment="typelib-1_0-EvinceView-3_0 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337738" comment="libpoppler-glib8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337739" comment="libpoppler60 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337407" comment="poppler-tools is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009337738" comment="libpoppler-glib8 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337740" comment="libpoppler44 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337739" comment="libpoppler60 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337407" comment="poppler-tools is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2143</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2143" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2143" ref_url="https://www.suse.com/security/cve/CVE-2012-2143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000221.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0826-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1299-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2143/">CVE-2012-2143</cve>
	<bugzilla href="https://bugzilla.suse.com/766797">SUSE bug 766797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/766798">SUSE bug 766798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/766799">SUSE bug 766799</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2150</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2150" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2150" ref_url="https://www.suse.com/security/cve/CVE-2012-2150" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:2383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001764.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:2384-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-December/001765.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1429-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0018-1" ref_url="https://lists.opensuse.org/opensuse-updates/2016-01/msg00007.html" source="SUSE-SU"/>
    <description>
    xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2150/">CVE-2012-2150</cve>
	<bugzilla href="https://bugzilla.suse.com/939367">SUSE bug 939367</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141166" comment="xfsprogs-4.3.0-8.8 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145373" comment="xfsprogs-devel-4.3.0-8.8 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159324" comment="xfsprogs-4.3.0-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159842" comment="xfsprogs-devel-4.3.0-12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512633" comment="xfsprogs-4.15.0-1.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513889" comment="xfsprogs-devel-4.15.0-1.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514545" comment="xfsprogs-3.2.1-3.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539499" comment="xfsprogs-devel-3.2.1-3.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543397" comment="xfsprogs-3.2.1-3.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2214</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2214" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2214" ref_url="https://www.suse.com/security/cve/CVE-2012-2214" source="SUSE CVE"/>
    <description>
    proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service (application crash) via a sequence of XMPP file-transfer requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2214/">CVE-2012-2214</cve>
	<bugzilla href="https://bugzilla.suse.com/760890">SUSE bug 760890</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2240</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2240" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2240" ref_url="https://www.suse.com/security/cve/CVE-2012-2240" source="SUSE CVE"/>
    <description>
    scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2240/">CVE-2012-2240</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144722" comment="checkbashisms-2.12.6-3.42 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2241</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2241" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2241" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2241" ref_url="https://www.suse.com/security/cve/CVE-2012-2241" source="SUSE CVE"/>
    <description>
    scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2241/">CVE-2012-2241</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144722" comment="checkbashisms-2.12.6-3.42 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2311</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2311" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2311" ref_url="https://www.suse.com/security/cve/CVE-2012-2311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0598-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0598-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0604-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0590-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00002.html" source="SUSE-SU"/>
    <description>
    sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2311/">CVE-2012-2311</cve>
	<bugzilla href="https://bugzilla.suse.com/760536">SUSE bug 760536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/761631">SUSE bug 761631</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2313</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2313" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2313" ref_url="https://www.suse.com/security/cve/CVE-2012-2313" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0689-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0736-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2313/">CVE-2012-2313</cve>
	<bugzilla href="https://bugzilla.suse.com/758813">SUSE bug 758813</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2328</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2328" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2328" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2328" ref_url="https://www.suse.com/security/cve/CVE-2012-2328" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1621-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0144-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00038.html" source="SUSE-SU"/>
    <description>
    internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-19"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2328/">CVE-2012-2328</cve>
	<bugzilla href="https://bugzilla.suse.com/768128">SUSE bug 768128</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338834" comment="sblim-cim-client2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338835" comment="sblim-cim-client2-javadoc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338836" comment="sblim-cim-client2-manual is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122333" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2333</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2333" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2333" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2333" ref_url="https://www.suse.com/security/cve/CVE-2012-2333" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0679-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
    <description>
    Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2333/">CVE-2012-2333</cve>
	<bugzilla href="https://bugzilla.suse.com/761838">SUSE bug 761838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763341">SUSE bug 763341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2335</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2335" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2335" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2335" ref_url="https://www.suse.com/security/cve/CVE-2012-2335" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0721-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
    <description>
    php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code by leveraging improper interaction between the PHP sapi/cgi/cgi_main.c component and a query string beginning with a +- sequence.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2335/">CVE-2012-2335</cve>
	<bugzilla href="https://bugzilla.suse.com/761631">SUSE bug 761631</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728467" comment="apache2-mod_php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728468" comment="php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728469" comment="php74-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728470" comment="php74-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728471" comment="php74-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728472" comment="php74-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728473" comment="php74-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728474" comment="php74-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728475" comment="php74-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728476" comment="php74-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728477" comment="php74-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728478" comment="php74-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728479" comment="php74-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728480" comment="php74-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728481" comment="php74-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728482" comment="php74-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728483" comment="php74-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728484" comment="php74-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728485" comment="php74-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728486" comment="php74-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728487" comment="php74-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728488" comment="php74-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728489" comment="php74-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728490" comment="php74-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728491" comment="php74-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728492" comment="php74-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728493" comment="php74-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728494" comment="php74-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728495" comment="php74-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728496" comment="php74-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728497" comment="php74-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728498" comment="php74-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728499" comment="php74-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728500" comment="php74-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728501" comment="php74-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728502" comment="php74-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728503" comment="php74-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728504" comment="php74-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728505" comment="php74-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728506" comment="php74-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728507" comment="php74-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728508" comment="php74-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728509" comment="php74-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728510" comment="php74-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728511" comment="php74-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728512" comment="php74-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728513" comment="php74-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728514" comment="php74-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728515" comment="php74-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728516" comment="php74-zlib is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2336</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2336" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2336" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2336" ref_url="https://www.suse.com/security/cve/CVE-2012-2336" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0721-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0840-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
    <description>
    sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2336/">CVE-2012-2336</cve>
	<bugzilla href="https://bugzilla.suse.com/761631">SUSE bug 761631</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728467" comment="apache2-mod_php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728468" comment="php74 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728469" comment="php74-bcmath is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728470" comment="php74-bz2 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728471" comment="php74-calendar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728472" comment="php74-ctype is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728473" comment="php74-curl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728474" comment="php74-dba is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728475" comment="php74-dom is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728476" comment="php74-enchant is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728477" comment="php74-exif is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728478" comment="php74-fastcgi is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728479" comment="php74-fileinfo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728480" comment="php74-fpm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728481" comment="php74-ftp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728482" comment="php74-gd is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728483" comment="php74-gettext is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728484" comment="php74-gmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728485" comment="php74-iconv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728486" comment="php74-intl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728487" comment="php74-json is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728488" comment="php74-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728489" comment="php74-mbstring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728490" comment="php74-mysql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728491" comment="php74-odbc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728492" comment="php74-opcache is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728493" comment="php74-openssl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728494" comment="php74-pcntl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728495" comment="php74-pdo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728496" comment="php74-pgsql is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728497" comment="php74-phar is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728498" comment="php74-posix is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728499" comment="php74-readline is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728500" comment="php74-shmop is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728501" comment="php74-snmp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728502" comment="php74-soap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728503" comment="php74-sockets is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728504" comment="php74-sodium is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728505" comment="php74-sqlite is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728506" comment="php74-sysvmsg is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728507" comment="php74-sysvsem is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728508" comment="php74-sysvshm is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728509" comment="php74-tidy is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728510" comment="php74-tokenizer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728511" comment="php74-xmlreader is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728512" comment="php74-xmlrpc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728513" comment="php74-xmlwriter is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728514" comment="php74-xsl is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728515" comment="php74-zip is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728516" comment="php74-zlib is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2337</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2337" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2337" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2337" ref_url="https://www.suse.com/security/cve/CVE-2012-2337" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0641-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-May/000118.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0652-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00036.html" source="SUSE-SU"/>
    <description>
    sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2337/">CVE-2012-2337</cve>
	<bugzilla href="https://bugzilla.suse.com/762327">SUSE bug 762327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826687">SUSE bug 826687</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141130" comment="sudo-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141810" comment="sudo-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144993" comment="sudo-devel-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145367" comment="sudo-devel-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159307" comment="sudo-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159839" comment="sudo-devel-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512620" comment="sudo-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513418" comment="sudo-1.8.27-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513882" comment="sudo-devel-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514252" comment="sudo-devel-1.8.27-2.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2369</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2369" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2369" ref_url="https://www.suse.com/security/cve/CVE-2012-2369" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0703-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0717-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2369/">CVE-2012-2369</cve>
	<bugzilla href="https://bugzilla.suse.com/762498">SUSE bug 762498</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141774" comment="pidgin-otr-4.0.0-6.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142148" comment="pidgin-otr-4.0.0-11.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159707" comment="pidgin-plugin-otr-4.0.2-1.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2372</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2372" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2372" ref_url="https://www.suse.com/security/cve/CVE-2012-2372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000435.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0908-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0909-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0910-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0911-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0912-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address, as demonstrated by rds-ping.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2372/">CVE-2012-2372</cve>
	<bugzilla href="https://bugzilla.suse.com/767610">SUSE bug 767610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2375</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2375" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2375" ref_url="https://www.suse.com/security/cve/CVE-2012-2375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00020.html" source="SUSE-SU"/>
    <description>
    The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-04"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2375/">CVE-2012-2375</cve>
	<bugzilla href="https://bugzilla.suse.com/762992">SUSE bug 762992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/851103">SUSE bug 851103</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2383</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2383" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2383" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2383" ref_url="https://www.suse.com/security/cve/CVE-2012-2383" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2383/">CVE-2012-2383</cve>
	<bugzilla href="https://bugzilla.suse.com/763194">SUSE bug 763194</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2384</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2384" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2384" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2384" ref_url="https://www.suse.com/security/cve/CVE-2012-2384" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2384/">CVE-2012-2384</cve>
	<bugzilla href="https://bugzilla.suse.com/763194">SUSE bug 763194</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2388</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2388" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2388" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2388" ref_url="https://www.suse.com/security/cve/CVE-2012-2388" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000127.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0691-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00002.html" source="SUSE-SU"/>
    <description>
    The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2388/">CVE-2012-2388</cve>
	<bugzilla href="https://bugzilla.suse.com/1107874">SUSE bug 1107874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/761325">SUSE bug 761325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815236">SUSE bug 815236</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110995" comment="strongswan-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110997" comment="strongswan-doc-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110998" comment="strongswan-hmac-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110999" comment="strongswan-ipsec-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009111000" comment="strongswan-libs0-5.1.3-18.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110995" comment="strongswan-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110997" comment="strongswan-doc-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110999" comment="strongswan-ipsec-5.1.3-18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009111000" comment="strongswan-libs0-5.1.3-18.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119278" comment="strongswan-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119279" comment="strongswan-doc-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119280" comment="strongswan-ipsec-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119281" comment="strongswan-libs0-5.1.3-22.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119278" comment="strongswan-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119279" comment="strongswan-doc-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119300" comment="strongswan-hmac-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119280" comment="strongswan-ipsec-5.1.3-22.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119281" comment="strongswan-libs0-5.1.3-22.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141806" comment="strongswan-5.1.3-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141807" comment="strongswan-doc-5.1.3-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141808" comment="strongswan-ipsec-5.1.3-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141809" comment="strongswan-libs0-5.1.3-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156341" comment="strongswan-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156342" comment="strongswan-doc-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156343" comment="strongswan-ipsec-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156344" comment="strongswan-libs0-5.1.3-25.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156341" comment="strongswan-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156342" comment="strongswan-doc-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156345" comment="strongswan-hmac-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156343" comment="strongswan-ipsec-5.1.3-25.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156344" comment="strongswan-libs0-5.1.3-25.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009161786" comment="strongswan-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161787" comment="strongswan-doc-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161788" comment="strongswan-ipsec-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161789" comment="strongswan-libs0-5.1.3-26.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009161786" comment="strongswan-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161787" comment="strongswan-doc-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161803" comment="strongswan-hmac-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161788" comment="strongswan-ipsec-5.1.3-26.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009161789" comment="strongswan-libs0-5.1.3-26.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2390</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2390" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2390" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2390" ref_url="https://www.suse.com/security/cve/CVE-2012-2390" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0789-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-06/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system crash) via invalid MAP_HUGETLB mmap operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2390/">CVE-2012-2390</cve>
	<bugzilla href="https://bugzilla.suse.com/764150">SUSE bug 764150</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2391</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2391" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2391" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2391" ref_url="https://www.suse.com/security/cve/CVE-2012-2391" source="SUSE CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-2942.  Reason: This candidate is a duplicate of CVE-2012-2942.  Notes: All CVE users should reference CVE-2012-2942 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2391/">CVE-2012-2391</cve>
	<bugzilla href="https://bugzilla.suse.com/763833">SUSE bug 763833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147478" comment="haproxy-1.5.4-1.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2392</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2392" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2392" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2392" ref_url="https://www.suse.com/security/cve/CVE-2012-2392" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0657-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00041.html" source="SUSE-SU"/>
    <description>
    Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2392/">CVE-2012-2392</cve>
	<bugzilla href="https://bugzilla.suse.com/763634">SUSE bug 763634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763855">SUSE bug 763855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/769578">SUSE bug 769578</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2393</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2393" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2393" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2393" ref_url="https://www.suse.com/security/cve/CVE-2012-2393" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0657-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00041.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2393/">CVE-2012-2393</cve>
	<bugzilla href="https://bugzilla.suse.com/763634">SUSE bug 763634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763855">SUSE bug 763855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763857">SUSE bug 763857</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2394</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2394" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2394" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2394" ref_url="https://www.suse.com/security/cve/CVE-2012-2394" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-June/000159.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0657-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00041.html" source="SUSE-SU"/>
    <description>
    Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2394/">CVE-2012-2394</cve>
	<bugzilla href="https://bugzilla.suse.com/763634">SUSE bug 763634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/763859">SUSE bug 763859</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2396</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2396" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2396" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2396" ref_url="https://www.suse.com/security/cve/CVE-2012-2396" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0615-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-05/msg00017.html" source="SUSE-SU"/>
    <description>
    VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2396/">CVE-2012-2396</cve>
	<bugzilla href="https://bugzilla.suse.com/760496">SUSE bug 760496</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144944" comment="libtag-devel-1.9.1-1.265 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140963" comment="libtag1-1.9.1-1.265 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140964" comment="libtag_c0-1.9.1-1.265 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140965" comment="taglib-1.9.1-1.265 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140963" comment="libtag1-1.9.1-1.265 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141698" comment="libtag1-32bit-1.9.1-1.265 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140964" comment="libtag_c0-1.9.1-1.265 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141699" comment="libtag_c0-32bit-1.9.1-1.265 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140965" comment="taglib-1.9.1-1.265 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141698" comment="libtag1-32bit-1.9.1-1.265 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141699" comment="libtag_c0-32bit-1.9.1-1.265 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147588" comment="libtag1-1.9.1-1.218 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147589" comment="libtag_c0-1.9.1-1.218 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147590" comment="taglib-1.9.1-1.218 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2417</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2417" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2417" ref_url="https://www.suse.com/security/cve/CVE-2012-2417" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000177.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0830-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00010.html" source="SUSE-SU"/>
    <description>
    PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2417/">CVE-2012-2417</cve>
	<bugzilla href="https://bugzilla.suse.com/764127">SUSE bug 764127</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-public-cloud:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178199" comment="SUSE Linux Enterprise Module for Public Cloud 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144245" comment="python-pycrypto-2.6.1-1.18 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2451</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2451" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2451" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2451" ref_url="https://www.suse.com/security/cve/CVE-2012-2451" source="SUSE CVE"/>
    <description>
    The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.  NOTE: some of these details are obtained from third party information.  NOTE: it has been reported that this might only be exploitable by writing in the same directory as the .ini file. If this is the case, then this issue might not cross privilege boundaries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2451/">CVE-2012-2451</cve>
	<bugzilla href="https://bugzilla.suse.com/760459">SUSE bug 760459</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141066" comment="perl-Config-IniFiles-2.82-3.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147604" comment="perl-Config-IniFiles-2.82-3.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2625</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2625" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2625" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2625" ref_url="https://www.suse.com/security/cve/CVE-2012-2625" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1176-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html" source="SUSE-SU"/>
    <description>
    The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2625/">CVE-2012-2625</cve>
	<bugzilla href="https://bugzilla.suse.com/762484">SUSE bug 762484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/773393">SUSE bug 773393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/773401">SUSE bug 773401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787163">SUSE bug 787163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2655</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2655" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2655" ref_url="https://www.suse.com/security/cve/CVE-2012-2655" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000221.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1299-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2655/">CVE-2012-2655</cve>
	<bugzilla href="https://bugzilla.suse.com/765069">SUSE bug 765069</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2657</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2657" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2657" ref_url="https://www.suse.com/security/cve/CVE-2012-2657" source="SUSE CVE"/>
    <description>
    ** DISPUTED ** Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a denial of service (crash) via a long string in the FILEDSN option. NOTE: this issue might not be a vulnerability, since the ability to set this option typically implies that the attacker already has legitimate access to cause a DoS or execute code, and therefore the issue would not cross privilege boundaries. There may be limited attack scenarios if isql command-line options are exposed to an attacker, although it seems likely that other, more serious issues would also be exposed, and this issue might not cross privilege boundaries in that context.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2657/">CVE-2012-2657</cve>
	<bugzilla href="https://bugzilla.suse.com/764737">SUSE bug 764737</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334325" comment="unixODBC is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337632" comment="unixODBC-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2669</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2669" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2669" ref_url="https://www.suse.com/security/cve/CVE-2012-2669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000166.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1526-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00042.html" source="SUSE-SU"/>
    <description>
    The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-18"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2669/">CVE-2012-2669</cve>
	<bugzilla href="https://bugzilla.suse.com/761200">SUSE bug 761200</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140682" comment="hyper-v-7-13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141886" comment="hyper-v-6-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143206" comment="hyper-v-6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140682" comment="hyper-v-7-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140682" comment="hyper-v-7-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512189" comment="hyper-v-7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512189" comment="hyper-v-7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512189" comment="hyper-v-7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2673</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2673" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2673" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2673" ref_url="https://www.suse.com/security/cve/CVE-2012-2673" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2673/">CVE-2012-2673</cve>
	<bugzilla href="https://bugzilla.suse.com/765444">SUSE bug 765444</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136646" comment="libgc1-7.2d-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136677" comment="gc-devel-7.2d-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140590" comment="libgc1-7.2d-3.77 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144746" comment="gc-devel-7.2d-3.77 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147564" comment="libgc1-7.2d-3.75 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2686</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2686" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2686" ref_url="https://www.suse.com/security/cve/CVE-2012-2686" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00072.html" source="SUSE-SU"/>
    <description>
    crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2686/">CVE-2012-2686</cve>
	<bugzilla href="https://bugzilla.suse.com/802648">SUSE bug 802648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2687</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2687" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2687" ref_url="https://www.suse.com/security/cve/CVE-2012-2687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0387-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000362.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000382.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000464.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0243-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0245-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0632-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2687/">CVE-2012-2687</cve>
	<bugzilla href="https://bugzilla.suse.com/777260">SUSE bug 777260</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2688</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2688" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2688" ref_url="https://www.suse.com/security/cve/CVE-2012-2688" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1033-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0976-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00019.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-2688/">CVE-2012-2688</cve>
	<bugzilla href="https://bugzilla.suse.com/772582">SUSE bug 772582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2737</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2737" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2737" ref_url="https://www.suse.com/security/cve/CVE-2012-2737" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0845-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00016.html" source="SUSE-SU"/>
    <description>
    The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2737/">CVE-2012-2737</cve>
	<bugzilla href="https://bugzilla.suse.com/768807">SUSE bug 768807</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144708" comment="accountsservice-devel-0.6.35-1.126 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145198" comment="accountsservice-devel-0.6.42-14.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149932" comment="accountsservice-devel-0.6.35-3.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513624" comment="accountsservice-devel-0.6.42-16.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140439" comment="accountsservice-0.6.42-14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140440" comment="accountsservice-lang-0.6.42-14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140441" comment="libaccountsservice0-0.6.42-14.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140442" comment="typelib-1_0-AccountsService-1_0-0.6.42-14.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141205" comment="accountsservice-0.6.35-1.126 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141206" comment="accountsservice-lang-0.6.35-1.126 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141207" comment="libaccountsservice0-0.6.35-1.126 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141208" comment="typelib-1_0-AccountsService-1_0-0.6.35-1.126 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141843" comment="accountsservice-0.6.35-3.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141844" comment="accountsservice-lang-0.6.35-3.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141845" comment="libaccountsservice0-0.6.35-3.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141846" comment="typelib-1_0-AccountsService-1_0-0.6.35-3.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143120" comment="accountsservice-0.6.35-1.96 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143121" comment="accountsservice-lang-0.6.35-1.96 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143122" comment="libaccountsservice0-0.6.35-1.96 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143123" comment="typelib-1_0-AccountsService-1_0-0.6.35-1.96 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512025" comment="accountsservice-0.6.42-16.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512026" comment="accountsservice-lang-0.6.42-16.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512027" comment="libaccountsservice0-0.6.42-16.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512028" comment="typelib-1_0-AccountsService-1_0-0.6.42-16.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2738</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2738" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2738" ref_url="https://www.suse.com/security/cve/CVE-2012-2738" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0931-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0933-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00003.html" source="SUSE-SU"/>
    <description>
    The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2738/">CVE-2012-2738</cve>
	<bugzilla href="https://bugzilla.suse.com/772761">SUSE bug 772761</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141004" comment="libvte9-0.28.2-19.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141727" comment="libvte9-0.28.2-17.83 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144997" comment="vte2-devel-0.28.2-17.83 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145370" comment="vte2-devel-0.28.2-19.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141004" comment="libvte9-0.28.2-19.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141005" comment="python-vte-0.28.2-19.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141006" comment="vte2-lang-0.28.2-19.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141727" comment="libvte9-0.28.2-17.83 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143260" comment="python-vte-0.28.2-17.83 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143261" comment="vte2-lang-0.28.2-17.83 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2744</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2744" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2744" ref_url="https://www.suse.com/security/cve/CVE-2012-2744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00015.html" source="SUSE-SU"/>
    <description>
    net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via certain types of fragmented IPv6 packets.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2744/">CVE-2012-2744</cve>
	<bugzilla href="https://bugzilla.suse.com/770697">SUSE bug 770697</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2745</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2745" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2745" ref_url="https://www.suse.com/security/cve/CVE-2012-2745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-October/000278.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The copy_creds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service (panic) via a crafted application that uses the fork system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2745/">CVE-2012-2745</cve>
	<bugzilla href="https://bugzilla.suse.com/770695">SUSE bug 770695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2812</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2812" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2812" ref_url="https://www.suse.com/security/cve/CVE-2012-2812" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2812/">CVE-2012-2812</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144854" comment="libexif-devel-0.6.21-6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147563" comment="libexif12-0.6.21-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170045" comment="libexif-devel-0.6.21-8.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140840" comment="libexif12-0.6.21-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140841" comment="libexif12-32bit-0.6.21-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170040" comment="libexif12-0.6.21-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170041" comment="libexif12-32bit-0.6.21-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2813</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2813" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2813" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2813" ref_url="https://www.suse.com/security/cve/CVE-2012-2813" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2813/">CVE-2012-2813</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144854" comment="libexif-devel-0.6.21-6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147563" comment="libexif12-0.6.21-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170045" comment="libexif-devel-0.6.21-8.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140840" comment="libexif12-0.6.21-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140841" comment="libexif12-32bit-0.6.21-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170040" comment="libexif12-0.6.21-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170041" comment="libexif12-32bit-0.6.21-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2814</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2814" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2814" ref_url="https://www.suse.com/security/cve/CVE-2012-2814" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2814/">CVE-2012-2814</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144854" comment="libexif-devel-0.6.21-6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147563" comment="libexif12-0.6.21-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170045" comment="libexif-devel-0.6.21-8.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140840" comment="libexif12-0.6.21-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140841" comment="libexif12-32bit-0.6.21-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170040" comment="libexif12-0.6.21-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170041" comment="libexif12-32bit-0.6.21-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2836</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2836" ref_url="https://www.suse.com/security/cve/CVE-2012-2836" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2836/">CVE-2012-2836</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144854" comment="libexif-devel-0.6.21-6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147563" comment="libexif12-0.6.21-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170045" comment="libexif-devel-0.6.21-8.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140840" comment="libexif12-0.6.21-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140841" comment="libexif12-32bit-0.6.21-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170040" comment="libexif12-0.6.21-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170041" comment="libexif12-32bit-0.6.21-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2837</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2837" ref_url="https://www.suse.com/security/cve/CVE-2012-2837" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2837/">CVE-2012-2837</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144854" comment="libexif-devel-0.6.21-6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147563" comment="libexif12-0.6.21-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170045" comment="libexif-devel-0.6.21-8.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140840" comment="libexif12-0.6.21-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140841" comment="libexif12-32bit-0.6.21-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170040" comment="libexif12-0.6.21-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170041" comment="libexif12-32bit-0.6.21-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2840</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2840" ref_url="https://www.suse.com/security/cve/CVE-2012-2840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2840/">CVE-2012-2840</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144854" comment="libexif-devel-0.6.21-6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147563" comment="libexif12-0.6.21-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170045" comment="libexif-devel-0.6.21-8.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140840" comment="libexif12-0.6.21-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140841" comment="libexif12-32bit-0.6.21-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170040" comment="libexif12-0.6.21-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170041" comment="libexif12-32bit-0.6.21-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2841</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2841" ref_url="https://www.suse.com/security/cve/CVE-2012-2841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0902-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0903-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0914-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00048.html" source="SUSE-SU"/>
    <description>
    Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-18"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2841/">CVE-2012-2841</cve>
	<bugzilla href="https://bugzilla.suse.com/771229">SUSE bug 771229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831515">SUSE bug 831515</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144854" comment="libexif-devel-0.6.21-6.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147563" comment="libexif12-0.6.21-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170045" comment="libexif-devel-0.6.21-8.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140840" comment="libexif12-0.6.21-6.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140841" comment="libexif12-32bit-0.6.21-6.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009170040" comment="libexif12-0.6.21-8.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009170041" comment="libexif12-32bit-0.6.21-8.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2944</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-2944" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2944" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-2944" ref_url="https://www.suse.com/security/cve/CVE-2012-2944" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000237.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1077-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000239.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1069-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00049.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2944/">CVE-2012-2944</cve>
	<bugzilla href="https://bugzilla.suse.com/764699">SUSE bug 764699</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140972" comment="libupsclient1-2.7.1-4.84 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140973" comment="nut-2.7.1-4.84 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140974" comment="nut-drivers-net-2.7.1-4.84 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144974" comment="nut-cgi-2.7.1-4.84 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144975" comment="nut-devel-2.7.1-4.84 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147594" comment="libupsclient1-2.7.1-4.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147595" comment="nut-2.7.1-4.55 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147596" comment="nut-drivers-net-2.7.1-4.55 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513262" comment="libupsclient1-2.7.4-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513263" comment="nut-2.7.4-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513264" comment="nut-drivers-net-2.7.4-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513551" comment="libupsclient1-2.7.1-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513552" comment="nut-2.7.1-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513553" comment="nut-drivers-net-2.7.1-1.30 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513861" comment="nut-cgi-2.7.1-1.30 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513862" comment="nut-devel-2.7.1-1.30 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514222" comment="nut-cgi-2.7.4-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514223" comment="nut-devel-2.7.4-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3136</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3136" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3136" ref_url="https://www.suse.com/security/cve/CVE-2012-3136" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3136/">CVE-2012-3136</cve>
	<bugzilla href="https://bugzilla.suse.com/777499">SUSE bug 777499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333987" comment="java-1_7_0-openjdk is affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333987" comment="java-1_7_0-openjdk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335518" comment="java-1_7_0-openjdk-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335519" comment="java-1_7_0-openjdk-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335209" comment="java-1_7_0-openjdk-headless is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3143</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3143" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3143" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3143" ref_url="https://www.suse.com/security/cve/CVE-2012-3143" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-5089.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3143/">CVE-2012-3143</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3159</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3159" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3159" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3159" ref_url="https://www.suse.com/security/cve/CVE-2012-3159" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1533.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3159/">CVE-2012-3159</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3174</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3174" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3174" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3174" ref_url="https://www.suse.com/security/cve/CVE-2012-3174" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422.  NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422.  This identifier is for a different vulnerability whose details are not public as of 20130114.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3174/">CVE-2012-3174</cve>
	<bugzilla href="https://bugzilla.suse.com/798324">SUSE bug 798324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798521">SUSE bug 798521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334336" comment="java-1_6_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337225" comment="java-1_6_0-ibm-fonts is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337226" comment="java-1_6_0-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337227" comment="java-1_6_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3213</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3213" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3213" ref_url="https://www.suse.com/security/cve/CVE-2012-3213" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3213/">CVE-2012-3213</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3216</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3216" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3216" ref_url="https://www.suse.com/security/cve/CVE-2012-3216" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3216/">CVE-2012-3216</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3236</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3236" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3236" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3236" ref_url="https://www.suse.com/security/cve/CVE-2012-3236" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0963-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000199.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:0966-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000200.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1080-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html" source="SUSE-SU"/>
    <description>
    fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3236/">CVE-2012-3236</cve>
	<bugzilla href="https://bugzilla.suse.com/763595">SUSE bug 763595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/768376">SUSE bug 768376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/769565">SUSE bug 769565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141368" comment="gimp-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141369" comment="gimp-lang-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141370" comment="gimp-plugins-python-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142102" comment="gimp-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142103" comment="gimp-lang-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142104" comment="gimp-plugins-python-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144763" comment="gimp-devel-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145239" comment="gimp-devel-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150803" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150804" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150805" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150808" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167012" comment="gimp-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167013" comment="gimp-lang-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167014" comment="gimp-plugins-python-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167017" comment="gimp-devel-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3291</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3291" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3291" ref_url="https://www.suse.com/security/cve/CVE-2012-3291" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1072-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00186.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3291/">CVE-2012-3291</cve>
	<bugzilla href="https://bugzilla.suse.com/767616">SUSE bug 767616</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512579" comment="openconnect-7.08-1.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512580" comment="openconnect-lang-7.08-1.27 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3342</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3342" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3342" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3342" ref_url="https://www.suse.com/security/cve/CVE-2012-3342" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3342/">CVE-2012-3342</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3355</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3355" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3355" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3355" ref_url="https://www.suse.com/security/cve/CVE-2012-3355" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0954-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00010.html" source="SUSE-SU"/>
    <description>
    (1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3355/">CVE-2012-3355</cve>
	<bugzilla href="https://bugzilla.suse.com/768681">SUSE bug 768681</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141799" comment="rhythmbox-3.0.2-1.92 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141800" comment="rhythmbox-lang-3.0.2-1.92 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141799" comment="rhythmbox-3.0.2-1.92 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144988" comment="rhythmbox-devel-3.0.2-1.92 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142150" comment="rhythmbox-3.4-6.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142151" comment="rhythmbox-lang-3.4-6.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142150" comment="rhythmbox-3.4-6.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145362" comment="rhythmbox-devel-3.4-6.14 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3364</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3364" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3364" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3364" ref_url="https://www.suse.com/security/cve/CVE-2012-3364" source="SUSE CVE"/>
    <description>
    Multiple stack-based buffer overflows in the Near Field Communication Controller Interface (NCI) in the Linux kernel before 3.4.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via incoming frames with crafted length fields.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-24"/>
	<updated date="2023-02-24"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3364/">CVE-2012-3364</cve>
	<bugzilla href="https://bugzilla.suse.com/769171">SUSE bug 769171</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3365</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3365" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3365" ref_url="https://www.suse.com/security/cve/CVE-2012-3365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1033-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1034-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0976-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00019.html" source="SUSE-SU"/>
    <description>
    The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3365/">CVE-2012-3365</cve>
	<bugzilla href="https://bugzilla.suse.com/772580">SUSE bug 772580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/772582">SUSE bug 772582</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728591" comment="apache2-mod_php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334214" comment="php74 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728592" comment="php74-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728593" comment="php74-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728594" comment="php74-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728595" comment="php74-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728596" comment="php74-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728597" comment="php74-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728598" comment="php74-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728599" comment="php74-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728600" comment="php74-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728601" comment="php74-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728602" comment="php74-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728603" comment="php74-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728604" comment="php74-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728605" comment="php74-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728606" comment="php74-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728607" comment="php74-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728608" comment="php74-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728609" comment="php74-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728610" comment="php74-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728611" comment="php74-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728612" comment="php74-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728613" comment="php74-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728614" comment="php74-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728615" comment="php74-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728616" comment="php74-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728617" comment="php74-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728618" comment="php74-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728619" comment="php74-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728620" comment="php74-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728621" comment="php74-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728622" comment="php74-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728623" comment="php74-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728624" comment="php74-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728625" comment="php74-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728626" comment="php74-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728627" comment="php74-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728628" comment="php74-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728629" comment="php74-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728630" comment="php74-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728631" comment="php74-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728632" comment="php74-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728633" comment="php74-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728634" comment="php74-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728635" comment="php74-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728636" comment="php74-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728637" comment="php74-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728638" comment="php74-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728639" comment="php74-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3374</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3374" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3374" ref_url="https://www.suse.com/security/cve/CVE-2012-3374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0890-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-07/msg00009.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3374/">CVE-2012-3374</cve>
	<bugzilla href="https://bugzilla.suse.com/770304">SUSE bug 770304</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3375</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3375" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3375" ref_url="https://www.suse.com/security/cve/CVE-2012-3375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000194.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1016-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000219.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000234.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3375/">CVE-2012-3375</cve>
	<bugzilla href="https://bugzilla.suse.com/769896">SUSE bug 769896</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3386</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3386" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3386" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3386" ref_url="https://www.suse.com/security/cve/CVE-2012-3386" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1329-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000578.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1519-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2022:10031-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RHVSBRLGJ5C5MYYVH2AXVEQBTRVMVFRD/" source="SUSE-SU"/>
    <description>
    The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3386/">CVE-2012-3386</cve>
	<bugzilla href="https://bugzilla.suse.com/770618">SUSE bug 770618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786745">SUSE bug 786745</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119222" comment="libpng12-0-32bit-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140672" comment="wdiff-1.2.1-3.64 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009119234" comment="libpng12-compat-devel-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119235" comment="libpng12-devel-1.2.50-13.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140671" comment="gv-3.7.4-1.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119222" comment="libpng12-0-32bit-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140672" comment="wdiff-1.2.1-3.64 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140671" comment="gv-3.7.4-1.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140672" comment="wdiff-1.2.1-3.64 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140671" comment="gv-3.7.4-1.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140672" comment="wdiff-1.2.1-3.64 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140671" comment="gv-3.7.4-1.39 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140672" comment="wdiff-1.2.1-3.64 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140672" comment="wdiff-1.2.1-3.64 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141583" comment="libpng12-0-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141584" comment="libpng12-0-32bit-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142005" comment="libpng15-15-1.5.22-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140672" comment="wdiff-1.2.1-3.64 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144907" comment="libpng12-compat-devel-1.2.50-8.21 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144908" comment="libpng12-devel-1.2.50-8.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147528" comment="gv-3.7.4-1.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119221" comment="libpng12-0-1.2.50-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009119233" comment="libpng15-15-1.5.22-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147529" comment="wdiff-1.2.1-3.56 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149999" comment="libpng12-0-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150000" comment="libpng12-0-32bit-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150810" comment="libpng15-15-1.5.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140672" comment="wdiff-1.2.1-3.64 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150239" comment="libpng12-compat-devel-1.2.50-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150240" comment="libpng12-devel-1.2.50-19.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3401</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3401" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3401" ref_url="https://www.suse.com/security/cve/CVE-2012-3401" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-July/000195.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0955-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00011.html" source="SUSE-SU"/>
    <description>
    The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3401/">CVE-2012-3401</cve>
	<bugzilla href="https://bugzilla.suse.com/770816">SUSE bug 770816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3406</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3406" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3406" ref_url="https://www.suse.com/security/cve/CVE-2012-3406" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-November/000297.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1666-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000315.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000539.html" source="SUSE-SU"/>
    <description>
    The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3406/">CVE-2012-3406</cve>
	<bugzilla href="https://bugzilla.suse.com/770891">SUSE bug 770891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826666">SUSE bug 826666</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140628" comment="glibc-profile-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145242" comment="glibc-devel-static-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156986" comment="glibc-html-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156988" comment="glibc-profile-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157048" comment="glibc-profile-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157042" comment="glibc-devel-static-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513507" comment="glibc-html-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513509" comment="glibc-profile-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513510" comment="glibc-profile-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512877" comment="glibc-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512878" comment="glibc-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512879" comment="glibc-devel-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512880" comment="glibc-devel-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512881" comment="glibc-html-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512882" comment="glibc-i18ndata-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512884" comment="glibc-locale-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512885" comment="glibc-locale-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512886" comment="glibc-profile-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512887" comment="glibc-profile-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512888" comment="nscd-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513676" comment="glibc-devel-static-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513980" comment="glibc-devel-static-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3412</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3412" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3412" ref_url="https://www.suse.com/security/cve/CVE-2012-3412" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3412/">CVE-2012-3412</cve>
	<bugzilla href="https://bugzilla.suse.com/774523">SUSE bug 774523</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3418</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3418" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3418" ref_url="https://www.suse.com/security/cve/CVE-2012-3418" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0190-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1036-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1079-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00002.html" source="SUSE-SU"/>
    <description>
    libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field value greater than the number of actual elements to the __pmDecodeCreds function in p_creds.c; (2) the string byte number value to the __pmDecodeNameList function in p_pmns.c; (3) the numids value to the __pmDecodeIDList function in p_pmns.c; (4) unspecified vectors to the __pmDecodeProfile function in p_profile.c; the (5) status number value or (6) string number value to the __pmDecodeNameList function in p_pmns.c; (7) certain input to the __pmDecodeResult function in p_result.c; (8) the name length field (namelen) to the DecodeNameReq function in p_pmns.c; (9) a crafted PDU_FETCH request to the __pmDecodeFetch function in p_fetch.c; (10) the namelen field in the __pmDecodeInstanceReq function in p_instance.c; (11) the buflen field to the __pmDecodeText function in p_text.c; (12) PDU_INSTANCE packets to the __pmDecodeInstance in p_instance.c; or the (13) c_numpmid or (14) v_numval fields to the __pmDecodeLogControl function in p_lcontrol.c, which triggers integer overflows, heap-based buffer overflows, and/or buffer over-reads.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3418/">CVE-2012-3418</cve>
	<bugzilla href="https://bugzilla.suse.com/775009">SUSE bug 775009</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145150" comment="libpcp-devel-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145151" comment="libpcp3-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145152" comment="pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145153" comment="pcp-import-iostat2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145154" comment="pcp-import-mrtg2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145155" comment="pcp-import-sar2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145157" comment="perl-PCP-LogImport-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145158" comment="perl-PCP-LogSummary-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145159" comment="perl-PCP-MMV-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145160" comment="perl-PCP-PMDA-3.6.10-4.97 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149944" comment="libpcp-devel-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514097" comment="libpcp_gui2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514098" comment="libpcp_import1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514099" comment="libpcp_mmv1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514100" comment="libpcp_trace2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514101" comment="libpcp_web1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514102" comment="pcp-conf-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514103" comment="pcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514104" comment="pcp-doc-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514105" comment="pcp-export-pcp2graphite-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514106" comment="pcp-export-pcp2influxdb-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514107" comment="pcp-export-zabbix-agent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514108" comment="pcp-gui-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514109" comment="pcp-import-collectl2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514110" comment="pcp-import-ganglia2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514111" comment="pcp-manager-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514112" comment="pcp-pmda-activemq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514113" comment="pcp-pmda-apache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514114" comment="pcp-pmda-bash-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514115" comment="pcp-pmda-bind2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514116" comment="pcp-pmda-bonding-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514117" comment="pcp-pmda-cifs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514118" comment="pcp-pmda-cisco-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514119" comment="pcp-pmda-dbping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514120" comment="pcp-pmda-dm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514121" comment="pcp-pmda-docker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514122" comment="pcp-pmda-ds389-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514123" comment="pcp-pmda-ds389log-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514124" comment="pcp-pmda-elasticsearch-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514125" comment="pcp-pmda-gfs2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514126" comment="pcp-pmda-gluster-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514127" comment="pcp-pmda-gpfs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514128" comment="pcp-pmda-gpsd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514129" comment="pcp-pmda-infiniband-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514130" comment="pcp-pmda-kvm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514131" comment="pcp-pmda-libvirt-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514132" comment="pcp-pmda-lio-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514133" comment="pcp-pmda-lmsensors-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514134" comment="pcp-pmda-logger-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514135" comment="pcp-pmda-lustre-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514136" comment="pcp-pmda-lustrecomm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514137" comment="pcp-pmda-mailq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514138" comment="pcp-pmda-memcache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514139" comment="pcp-pmda-mic-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514140" comment="pcp-pmda-mounts-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514141" comment="pcp-pmda-mysql-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514142" comment="pcp-pmda-named-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514143" comment="pcp-pmda-netfilter-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514144" comment="pcp-pmda-news-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514145" comment="pcp-pmda-nfsclient-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514146" comment="pcp-pmda-nginx-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514147" comment="pcp-pmda-nutcracker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514148" comment="pcp-pmda-nvidia-gpu-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514149" comment="pcp-pmda-oracle-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514150" comment="pcp-pmda-pdns-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514151" comment="pcp-pmda-perfevent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514152" comment="pcp-pmda-postfix-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514153" comment="pcp-pmda-redis-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514154" comment="pcp-pmda-roomtemp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514155" comment="pcp-pmda-rpm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514156" comment="pcp-pmda-rsyslog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514157" comment="pcp-pmda-samba-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514158" comment="pcp-pmda-sendmail-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514159" comment="pcp-pmda-shping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514160" comment="pcp-pmda-slurm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514161" comment="pcp-pmda-snmp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514162" comment="pcp-pmda-summary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514163" comment="pcp-pmda-systemd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514164" comment="pcp-pmda-trace-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514165" comment="pcp-pmda-unbound-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514166" comment="pcp-pmda-vmware-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514167" comment="pcp-pmda-weblog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514168" comment="pcp-pmda-zimbra-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514169" comment="pcp-pmda-zswap-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514170" comment="pcp-system-tools-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514171" comment="pcp-webapi-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514172" comment="python-pcp-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3419</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3419" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3419" ref_url="https://www.suse.com/security/cve/CVE-2012-3419" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0190-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1036-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1079-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00002.html" source="SUSE-SU"/>
    <description>
    Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3419/">CVE-2012-3419</cve>
	<bugzilla href="https://bugzilla.suse.com/775010">SUSE bug 775010</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145150" comment="libpcp-devel-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145151" comment="libpcp3-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145152" comment="pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145153" comment="pcp-import-iostat2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145154" comment="pcp-import-mrtg2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145155" comment="pcp-import-sar2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145157" comment="perl-PCP-LogImport-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145158" comment="perl-PCP-LogSummary-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145159" comment="perl-PCP-MMV-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145160" comment="perl-PCP-PMDA-3.6.10-4.97 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149944" comment="libpcp-devel-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514097" comment="libpcp_gui2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514098" comment="libpcp_import1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514099" comment="libpcp_mmv1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514100" comment="libpcp_trace2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514101" comment="libpcp_web1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514102" comment="pcp-conf-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514103" comment="pcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514104" comment="pcp-doc-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514105" comment="pcp-export-pcp2graphite-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514106" comment="pcp-export-pcp2influxdb-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514107" comment="pcp-export-zabbix-agent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514108" comment="pcp-gui-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514109" comment="pcp-import-collectl2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514110" comment="pcp-import-ganglia2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514111" comment="pcp-manager-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514112" comment="pcp-pmda-activemq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514113" comment="pcp-pmda-apache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514114" comment="pcp-pmda-bash-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514115" comment="pcp-pmda-bind2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514116" comment="pcp-pmda-bonding-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514117" comment="pcp-pmda-cifs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514118" comment="pcp-pmda-cisco-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514119" comment="pcp-pmda-dbping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514120" comment="pcp-pmda-dm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514121" comment="pcp-pmda-docker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514122" comment="pcp-pmda-ds389-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514123" comment="pcp-pmda-ds389log-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514124" comment="pcp-pmda-elasticsearch-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514125" comment="pcp-pmda-gfs2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514126" comment="pcp-pmda-gluster-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514127" comment="pcp-pmda-gpfs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514128" comment="pcp-pmda-gpsd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514129" comment="pcp-pmda-infiniband-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514130" comment="pcp-pmda-kvm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514131" comment="pcp-pmda-libvirt-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514132" comment="pcp-pmda-lio-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514133" comment="pcp-pmda-lmsensors-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514134" comment="pcp-pmda-logger-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514135" comment="pcp-pmda-lustre-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514136" comment="pcp-pmda-lustrecomm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514137" comment="pcp-pmda-mailq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514138" comment="pcp-pmda-memcache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514139" comment="pcp-pmda-mic-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514140" comment="pcp-pmda-mounts-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514141" comment="pcp-pmda-mysql-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514142" comment="pcp-pmda-named-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514143" comment="pcp-pmda-netfilter-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514144" comment="pcp-pmda-news-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514145" comment="pcp-pmda-nfsclient-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514146" comment="pcp-pmda-nginx-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514147" comment="pcp-pmda-nutcracker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514148" comment="pcp-pmda-nvidia-gpu-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514149" comment="pcp-pmda-oracle-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514150" comment="pcp-pmda-pdns-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514151" comment="pcp-pmda-perfevent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514152" comment="pcp-pmda-postfix-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514153" comment="pcp-pmda-redis-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514154" comment="pcp-pmda-roomtemp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514155" comment="pcp-pmda-rpm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514156" comment="pcp-pmda-rsyslog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514157" comment="pcp-pmda-samba-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514158" comment="pcp-pmda-sendmail-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514159" comment="pcp-pmda-shping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514160" comment="pcp-pmda-slurm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514161" comment="pcp-pmda-snmp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514162" comment="pcp-pmda-summary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514163" comment="pcp-pmda-systemd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514164" comment="pcp-pmda-trace-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514165" comment="pcp-pmda-unbound-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514166" comment="pcp-pmda-vmware-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514167" comment="pcp-pmda-weblog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514168" comment="pcp-pmda-zimbra-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514169" comment="pcp-pmda-zswap-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514170" comment="pcp-system-tools-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514171" comment="pcp-webapi-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514172" comment="python-pcp-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3420</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3420" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3420" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3420" ref_url="https://www.suse.com/security/cve/CVE-2012-3420" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0190-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1036-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1079-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00002.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3420/">CVE-2012-3420</cve>
	<bugzilla href="https://bugzilla.suse.com/775009">SUSE bug 775009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/775011">SUSE bug 775011</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145150" comment="libpcp-devel-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145151" comment="libpcp3-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145152" comment="pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145153" comment="pcp-import-iostat2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145154" comment="pcp-import-mrtg2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145155" comment="pcp-import-sar2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145157" comment="perl-PCP-LogImport-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145158" comment="perl-PCP-LogSummary-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145159" comment="perl-PCP-MMV-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145160" comment="perl-PCP-PMDA-3.6.10-4.97 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149944" comment="libpcp-devel-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514097" comment="libpcp_gui2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514098" comment="libpcp_import1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514099" comment="libpcp_mmv1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514100" comment="libpcp_trace2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514101" comment="libpcp_web1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514102" comment="pcp-conf-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514103" comment="pcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514104" comment="pcp-doc-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514105" comment="pcp-export-pcp2graphite-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514106" comment="pcp-export-pcp2influxdb-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514107" comment="pcp-export-zabbix-agent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514108" comment="pcp-gui-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514109" comment="pcp-import-collectl2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514110" comment="pcp-import-ganglia2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514111" comment="pcp-manager-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514112" comment="pcp-pmda-activemq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514113" comment="pcp-pmda-apache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514114" comment="pcp-pmda-bash-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514115" comment="pcp-pmda-bind2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514116" comment="pcp-pmda-bonding-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514117" comment="pcp-pmda-cifs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514118" comment="pcp-pmda-cisco-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514119" comment="pcp-pmda-dbping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514120" comment="pcp-pmda-dm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514121" comment="pcp-pmda-docker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514122" comment="pcp-pmda-ds389-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514123" comment="pcp-pmda-ds389log-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514124" comment="pcp-pmda-elasticsearch-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514125" comment="pcp-pmda-gfs2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514126" comment="pcp-pmda-gluster-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514127" comment="pcp-pmda-gpfs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514128" comment="pcp-pmda-gpsd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514129" comment="pcp-pmda-infiniband-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514130" comment="pcp-pmda-kvm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514131" comment="pcp-pmda-libvirt-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514132" comment="pcp-pmda-lio-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514133" comment="pcp-pmda-lmsensors-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514134" comment="pcp-pmda-logger-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514135" comment="pcp-pmda-lustre-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514136" comment="pcp-pmda-lustrecomm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514137" comment="pcp-pmda-mailq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514138" comment="pcp-pmda-memcache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514139" comment="pcp-pmda-mic-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514140" comment="pcp-pmda-mounts-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514141" comment="pcp-pmda-mysql-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514142" comment="pcp-pmda-named-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514143" comment="pcp-pmda-netfilter-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514144" comment="pcp-pmda-news-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514145" comment="pcp-pmda-nfsclient-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514146" comment="pcp-pmda-nginx-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514147" comment="pcp-pmda-nutcracker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514148" comment="pcp-pmda-nvidia-gpu-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514149" comment="pcp-pmda-oracle-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514150" comment="pcp-pmda-pdns-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514151" comment="pcp-pmda-perfevent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514152" comment="pcp-pmda-postfix-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514153" comment="pcp-pmda-redis-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514154" comment="pcp-pmda-roomtemp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514155" comment="pcp-pmda-rpm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514156" comment="pcp-pmda-rsyslog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514157" comment="pcp-pmda-samba-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514158" comment="pcp-pmda-sendmail-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514159" comment="pcp-pmda-shping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514160" comment="pcp-pmda-slurm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514161" comment="pcp-pmda-snmp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514162" comment="pcp-pmda-summary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514163" comment="pcp-pmda-systemd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514164" comment="pcp-pmda-trace-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514165" comment="pcp-pmda-unbound-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514166" comment="pcp-pmda-vmware-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514167" comment="pcp-pmda-weblog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514168" comment="pcp-pmda-zimbra-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514169" comment="pcp-pmda-zswap-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514170" comment="pcp-system-tools-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514171" comment="pcp-webapi-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514172" comment="python-pcp-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3421</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3421" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3421" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3421" ref_url="https://www.suse.com/security/cve/CVE-2012-3421" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0190-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1036-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1079-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1081-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00002.html" source="SUSE-SU"/>
    <description>
    The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3421/">CVE-2012-3421</cve>
	<bugzilla href="https://bugzilla.suse.com/775009">SUSE bug 775009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/775013">SUSE bug 775013</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145150" comment="libpcp-devel-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145151" comment="libpcp3-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145152" comment="pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145153" comment="pcp-import-iostat2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145154" comment="pcp-import-mrtg2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145155" comment="pcp-import-sar2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145157" comment="perl-PCP-LogImport-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145158" comment="perl-PCP-LogSummary-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145159" comment="perl-PCP-MMV-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145160" comment="perl-PCP-PMDA-3.6.10-4.97 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149944" comment="libpcp-devel-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514097" comment="libpcp_gui2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514098" comment="libpcp_import1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514099" comment="libpcp_mmv1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514100" comment="libpcp_trace2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514101" comment="libpcp_web1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514102" comment="pcp-conf-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514103" comment="pcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514104" comment="pcp-doc-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514105" comment="pcp-export-pcp2graphite-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514106" comment="pcp-export-pcp2influxdb-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514107" comment="pcp-export-zabbix-agent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514108" comment="pcp-gui-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514109" comment="pcp-import-collectl2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514110" comment="pcp-import-ganglia2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514111" comment="pcp-manager-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514112" comment="pcp-pmda-activemq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514113" comment="pcp-pmda-apache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514114" comment="pcp-pmda-bash-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514115" comment="pcp-pmda-bind2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514116" comment="pcp-pmda-bonding-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514117" comment="pcp-pmda-cifs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514118" comment="pcp-pmda-cisco-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514119" comment="pcp-pmda-dbping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514120" comment="pcp-pmda-dm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514121" comment="pcp-pmda-docker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514122" comment="pcp-pmda-ds389-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514123" comment="pcp-pmda-ds389log-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514124" comment="pcp-pmda-elasticsearch-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514125" comment="pcp-pmda-gfs2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514126" comment="pcp-pmda-gluster-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514127" comment="pcp-pmda-gpfs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514128" comment="pcp-pmda-gpsd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514129" comment="pcp-pmda-infiniband-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514130" comment="pcp-pmda-kvm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514131" comment="pcp-pmda-libvirt-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514132" comment="pcp-pmda-lio-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514133" comment="pcp-pmda-lmsensors-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514134" comment="pcp-pmda-logger-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514135" comment="pcp-pmda-lustre-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514136" comment="pcp-pmda-lustrecomm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514137" comment="pcp-pmda-mailq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514138" comment="pcp-pmda-memcache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514139" comment="pcp-pmda-mic-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514140" comment="pcp-pmda-mounts-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514141" comment="pcp-pmda-mysql-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514142" comment="pcp-pmda-named-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514143" comment="pcp-pmda-netfilter-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514144" comment="pcp-pmda-news-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514145" comment="pcp-pmda-nfsclient-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514146" comment="pcp-pmda-nginx-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514147" comment="pcp-pmda-nutcracker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514148" comment="pcp-pmda-nvidia-gpu-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514149" comment="pcp-pmda-oracle-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514150" comment="pcp-pmda-pdns-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514151" comment="pcp-pmda-perfevent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514152" comment="pcp-pmda-postfix-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514153" comment="pcp-pmda-redis-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514154" comment="pcp-pmda-roomtemp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514155" comment="pcp-pmda-rpm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514156" comment="pcp-pmda-rsyslog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514157" comment="pcp-pmda-samba-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514158" comment="pcp-pmda-sendmail-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514159" comment="pcp-pmda-shping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514160" comment="pcp-pmda-slurm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514161" comment="pcp-pmda-snmp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514162" comment="pcp-pmda-summary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514163" comment="pcp-pmda-systemd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514164" comment="pcp-pmda-trace-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514165" comment="pcp-pmda-unbound-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514166" comment="pcp-pmda-vmware-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514167" comment="pcp-pmda-weblog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514168" comment="pcp-pmda-zimbra-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514169" comment="pcp-pmda-zswap-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514170" comment="pcp-system-tools-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514171" comment="pcp-webapi-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514172" comment="python-pcp-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3422</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3422" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3422" ref_url="https://www.suse.com/security/cve/CVE-2012-3422" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0979-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0851-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0826-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0893-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0966-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html" source="SUSE-SU"/>
    <description>
    The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3422/">CVE-2012-3422</cve>
	<bugzilla href="https://bugzilla.suse.com/773458">SUSE bug 773458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/818768">SUSE bug 818768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141421" comment="java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114769" comment="java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141887" comment="java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159646" comment="java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159647" comment="java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3423</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3423" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3423" ref_url="https://www.suse.com/security/cve/CVE-2012-3423" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0979-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0851-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0981-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0982-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0826-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0893-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0966-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html" source="SUSE-SU"/>
    <description>
    The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3423/">CVE-2012-3423</cve>
	<bugzilla href="https://bugzilla.suse.com/773458">SUSE bug 773458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/818768">SUSE bug 818768</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141421" comment="java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114769" comment="java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141887" comment="java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159646" comment="java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159647" comment="java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3430</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3430" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3430" ref_url="https://www.suse.com/security/cve/CVE-2012-3430" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000321.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-17"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3430/">CVE-2012-3430</cve>
	<bugzilla href="https://bugzilla.suse.com/773383">SUSE bug 773383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3432</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3432" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3432" ref_url="https://www.suse.com/security/cve/CVE-2012-3432" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1043-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1176-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00063.html" source="SUSE-SU"/>
    <description>
    The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3432/">CVE-2012-3432</cve>
	<bugzilla href="https://bugzilla.suse.com/773393">SUSE bug 773393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/773401">SUSE bug 773401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3433</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3433" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3433" ref_url="https://www.suse.com/security/cve/CVE-2012-3433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1176-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00063.html" source="SUSE-SU"/>
    <description>
    Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3433/">CVE-2012-3433</cve>
	<bugzilla href="https://bugzilla.suse.com/773393">SUSE bug 773393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/773401">SUSE bug 773401</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3445</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3445" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3445" ref_url="https://www.suse.com/security/cve/CVE-2012-3445" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0991-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00023.html" source="SUSE-SU"/>
    <description>
    The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to cause a denial of service (libvirtd crash) via an RPC command with nparams set to zero, which triggers an out-of-bounds read or a free of an invalid pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3445/">CVE-2012-3445</cve>
	<bugzilla href="https://bugzilla.suse.com/773955">SUSE bug 773955</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144947" comment="libvirt-devel-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145170" comment="libvirt-devel-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145337" comment="libvirt-devel-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159830" comment="libvirt-devel-3.3.0-4.28 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513838" comment="libvirt-devel-4.0.0-6.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514203" comment="libvirt-devel-5.1.0-11.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143259" comment="libvirt-lock-sanlock-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143366" comment="libvirt-lock-sanlock-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159245" comment="libvirt-lock-sanlock-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159246" comment="libvirt-nss-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513554" comment="libvirt-daemon-hooks-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513555" comment="libvirt-lock-sanlock-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513556" comment="libvirt-nss-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513265" comment="libvirt-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513266" comment="libvirt-admin-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513267" comment="libvirt-client-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513268" comment="libvirt-daemon-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513269" comment="libvirt-daemon-config-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513270" comment="libvirt-daemon-config-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513271" comment="libvirt-daemon-driver-interface-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513272" comment="libvirt-daemon-driver-libxl-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513273" comment="libvirt-daemon-driver-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513274" comment="libvirt-daemon-driver-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513275" comment="libvirt-daemon-driver-nodedev-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513276" comment="libvirt-daemon-driver-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513277" comment="libvirt-daemon-driver-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513278" comment="libvirt-daemon-driver-secret-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513279" comment="libvirt-daemon-driver-storage-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513280" comment="libvirt-daemon-driver-storage-core-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513281" comment="libvirt-daemon-driver-storage-disk-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513282" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513283" comment="libvirt-daemon-driver-storage-logical-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513284" comment="libvirt-daemon-driver-storage-mpath-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513285" comment="libvirt-daemon-driver-storage-rbd-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513286" comment="libvirt-daemon-driver-storage-scsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513287" comment="libvirt-daemon-hooks-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513288" comment="libvirt-daemon-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513289" comment="libvirt-daemon-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513290" comment="libvirt-daemon-xen-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513291" comment="libvirt-doc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513292" comment="libvirt-libs-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513293" comment="libvirt-lock-sanlock-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513294" comment="libvirt-nss-5.1.0-11.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3449</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3449" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3449" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3449" ref_url="https://www.suse.com/security/cve/CVE-2012-3449" source="SUSE CVE"/>
    <description>
    Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and overwrite arbitrary files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3449/">CVE-2012-3449</cve>
	<bugzilla href="https://bugzilla.suse.com/774332">SUSE bug 774332</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159257" comment="openvswitch-2.7.0-2.29 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141050" comment="openvswitch-2.5.1-24.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141051" comment="openvswitch-dpdk-2.5.1-24.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141052" comment="openvswitch-dpdk-switch-2.5.1-24.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141053" comment="openvswitch-switch-2.5.1-24.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141050" comment="openvswitch-2.5.1-24.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141053" comment="openvswitch-switch-2.5.1-24.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143267" comment="openvswitch-2.1.2-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143268" comment="openvswitch-kmp-default-2.1.2_k3.12.28_4-8.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143269" comment="openvswitch-kmp-xen-2.1.2_k3.12.28_4-8.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143270" comment="openvswitch-switch-2.1.2-8.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143371" comment="openvswitch-2.1.2-4.5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143372" comment="openvswitch-kmp-default-2.1.2_k3.12.49_11-4.5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143373" comment="openvswitch-kmp-xen-2.1.2_k3.12.49_11-4.5.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143374" comment="openvswitch-switch-2.1.2-4.5.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513197" comment="libopenvswitch-2_11-0-2.11.1-1.75 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513198" comment="openvswitch-2.11.1-1.75 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513546" comment="libopenvswitch-2_8-0-2.8.4-3.36 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513547" comment="openvswitch-2.8.4-3.36 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3458</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3458" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3458" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3458" ref_url="https://www.suse.com/security/cve/CVE-2012-3458" source="SUSE CVE"/>
    <description>
    Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3458/">CVE-2012-3458</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147493" comment="python-Beaker-1.6.4-0.7.1 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3466</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3466" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3466" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3466" ref_url="https://www.suse.com/security/cve/CVE-2012-3466" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00037.html" source="SUSE-SU"/>
    <description>
    GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via unknown attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3466/">CVE-2012-3466</cve>
	<bugzilla href="https://bugzilla.suse.com/775235">SUSE bug 775235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140630" comment="gnome-keyring-3.20.0-27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140631" comment="gnome-keyring-32bit-3.20.0-27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140632" comment="gnome-keyring-lang-3.20.0-27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140633" comment="gnome-keyring-pam-3.20.0-27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140634" comment="gnome-keyring-pam-32bit-3.20.0-27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140635" comment="libgck-modules-gnome-keyring-3.20.0-27.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140630" comment="gnome-keyring-3.20.0-27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140632" comment="gnome-keyring-lang-3.20.0-27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140633" comment="gnome-keyring-pam-3.20.0-27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140635" comment="libgck-modules-gnome-keyring-3.20.0-27.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141394" comment="gnome-keyring-3.10.1-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141395" comment="gnome-keyring-32bit-3.10.1-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141396" comment="gnome-keyring-lang-3.10.1-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141397" comment="gnome-keyring-pam-3.10.1-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141398" comment="gnome-keyring-pam-32bit-3.10.1-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141399" comment="libgck-modules-gnome-keyring-3.10.1-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141876" comment="gnome-keyring-3.10.1-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141877" comment="gnome-keyring-32bit-3.10.1-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141878" comment="gnome-keyring-lang-3.10.1-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141879" comment="gnome-keyring-pam-3.10.1-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141880" comment="gnome-keyring-pam-32bit-3.10.1-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141881" comment="libgck-modules-gnome-keyring-3.10.1-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512160" comment="gnome-keyring-3.20.0-28.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512161" comment="gnome-keyring-32bit-3.20.0-28.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512162" comment="gnome-keyring-lang-3.20.0-28.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512163" comment="gnome-keyring-pam-3.20.0-28.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512164" comment="gnome-keyring-pam-32bit-3.20.0-28.3.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512165" comment="libgck-modules-gnome-keyring-3.20.0-28.3.18 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3482</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3482" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3482" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3482" ref_url="https://www.suse.com/security/cve/CVE-2012-3482" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2016:0872-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2016-March/001966.html" source="SUSE-SU"/>
    <description>
    Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3482/">CVE-2012-3482</cve>
	<bugzilla href="https://bugzilla.suse.com/775988">SUSE bug 775988</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140569" comment="fetchmail-6.3.26-12.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140570" comment="fetchmailconf-6.3.26-12.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141329" comment="fetchmail-6.3.26-5.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150270" comment="fetchmailconf-6.3.26-5.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143172" comment="fetchmail-6.3.26-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143173" comment="fetchmailconf-6.3.26-5.9 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3488</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3488" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3488" ref_url="https://www.suse.com/security/cve/CVE-2012-3488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-October/000277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1299-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3488/">CVE-2012-3488</cve>
	<bugzilla href="https://bugzilla.suse.com/776523">SUSE bug 776523</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3489</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3489" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3489" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3489" ref_url="https://www.suse.com/security/cve/CVE-2012-3489" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000221.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-October/000277.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1251-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00102.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1299-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3489/">CVE-2012-3489</cve>
	<bugzilla href="https://bugzilla.suse.com/776524">SUSE bug 776524</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3499</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3499" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3499" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3499" ref_url="https://www.suse.com/security/cve/CVE-2012-3499" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000419.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0648-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000465.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000464.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0629-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00046.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0632-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00049.html" source="SUSE-SU"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3499/">CVE-2012-3499</cve>
	<bugzilla href="https://bugzilla.suse.com/806458">SUSE bug 806458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807511">SUSE bug 807511</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3500</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3500" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3500" ref_url="https://www.suse.com/security/cve/CVE-2012-3500" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1437-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00000.html" source="SUSE-SU"/>
    <description>
    scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3500/">CVE-2012-3500</cve>
	<bugzilla href="https://bugzilla.suse.com/778291">SUSE bug 778291</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144722" comment="checkbashisms-2.12.6-3.42 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3502</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3502" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3502" ref_url="https://www.suse.com/security/cve/CVE-2012-3502" source="SUSE CVE"/>
    <description>
    The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determine the situations that require closing a back-end connection, which allows remote attackers to obtain sensitive information in opportunistic circumstances by reading a response that was intended for a different client.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3502/">CVE-2012-3502</cve>
	<bugzilla href="https://bugzilla.suse.com/777119">SUSE bug 777119</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3510</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3510" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3510" ref_url="https://www.suse.com/security/cve/CVE-2012-3510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1391-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID command.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3510/">CVE-2012-3510</cve>
	<bugzilla href="https://bugzilla.suse.com/776888">SUSE bug 776888</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3511</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3511" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3511" ref_url="https://www.suse.com/security/cve/CVE-2012-3511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of service (use-after-free and system crash) via vectors involving a (1) munmap or (2) close system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3511/">CVE-2012-3511</cve>
	<bugzilla href="https://bugzilla.suse.com/776884">SUSE bug 776884</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3515</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3515" ref_url="https://www.suse.com/security/cve/CVE-2012-3515" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1129-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1132-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1135-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1162-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1202-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1203-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1203-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1205-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1153-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1170-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1172-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1174-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1176-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3515/">CVE-2012-3515</cve>
	<bugzilla href="https://bugzilla.suse.com/777084">SUSE bug 777084</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141096" comment="qemu-ppc-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141097" comment="qemu-s390-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141088" comment="qemu-arm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141090" comment="qemu-block-rbd-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141091" comment="qemu-block-ssh-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141092" comment="qemu-guest-agent-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141095" comment="qemu-lang-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141087" comment="qemu-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141089" comment="qemu-block-curl-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141093" comment="qemu-ipxe-1.0.0-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141094" comment="qemu-kvm-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141098" comment="qemu-seabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141099" comment="qemu-sgabios-8-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141100" comment="qemu-tools-2.6.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141101" comment="qemu-vgabios-1.9.1-27.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141102" comment="qemu-x86-2.6.1-27.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141790" comment="qemu-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141791" comment="qemu-block-curl-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143281" comment="qemu-guest-agent-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141792" comment="qemu-ipxe-1.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141793" comment="qemu-kvm-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143282" comment="qemu-lang-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143283" comment="qemu-ppc-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143284" comment="qemu-s390-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141794" comment="qemu-seabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141795" comment="qemu-sgabios-8-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141796" comment="qemu-tools-2.0.0-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141797" comment="qemu-vgabios-1.7.4-40.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141798" comment="qemu-x86-2.0.0-40.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142048" comment="qemu-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142049" comment="qemu-block-curl-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143381" comment="qemu-block-rbd-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143382" comment="qemu-guest-agent-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142050" comment="qemu-ipxe-1.0.0-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142051" comment="qemu-kvm-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143383" comment="qemu-lang-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143384" comment="qemu-ppc-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143385" comment="qemu-s390-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142052" comment="qemu-seabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142053" comment="qemu-sgabios-8-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142054" comment="qemu-tools-2.3.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142055" comment="qemu-vgabios-1.8.1-5.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142056" comment="qemu-x86-2.3.1-5.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159277" comment="qemu-arm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159279" comment="qemu-block-rbd-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159280" comment="qemu-block-ssh-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159281" comment="qemu-guest-agent-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159284" comment="qemu-lang-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159285" comment="qemu-ppc-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159286" comment="qemu-s390-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159276" comment="qemu-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159278" comment="qemu-block-curl-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159282" comment="qemu-ipxe-1.0.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159283" comment="qemu-kvm-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159287" comment="qemu-seabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159288" comment="qemu-sgabios-8-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159289" comment="qemu-tools-2.9.0-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159290" comment="qemu-vgabios-1.10.2-5.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159291" comment="qemu-x86-2.9.0-5.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512603" comment="qemu-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513572" comment="qemu-arm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512604" comment="qemu-block-curl-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513573" comment="qemu-block-iscsi-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513574" comment="qemu-block-rbd-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513575" comment="qemu-block-ssh-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513576" comment="qemu-guest-agent-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512605" comment="qemu-ipxe-1.0.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512606" comment="qemu-kvm-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513577" comment="qemu-lang-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513578" comment="qemu-ppc-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513579" comment="qemu-s390-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512607" comment="qemu-seabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512608" comment="qemu-sgabios-8-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512609" comment="qemu-tools-2.11.2-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512610" comment="qemu-vgabios-1.11.0-4.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512611" comment="qemu-x86-2.11.2-4.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513375" comment="qemu-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513376" comment="qemu-arm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513377" comment="qemu-block-curl-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513378" comment="qemu-block-iscsi-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513379" comment="qemu-block-rbd-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513380" comment="qemu-block-ssh-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513381" comment="qemu-guest-agent-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513382" comment="qemu-ipxe-1.0.0+-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513383" comment="qemu-kvm-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513384" comment="qemu-lang-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513614" comment="qemu-ppc-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513615" comment="qemu-s390-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513385" comment="qemu-seabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513386" comment="qemu-sgabios-8-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513387" comment="qemu-tools-3.1.1.1-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513388" comment="qemu-vgabios-1.12.0-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513389" comment="qemu-x86-3.1.1.1-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3520</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3520" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3520" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3520" ref_url="https://www.suse.com/security/cve/CVE-2012-3520" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1330-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0261-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00018.html" source="SUSE-SU"/>
    <description>
    The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCM_CREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to (1) Avahi or (2) NetworkManager.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3520/">CVE-2012-3520</cve>
	<bugzilla href="https://bugzilla.suse.com/776925">SUSE bug 776925</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3524</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3524" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3524" ref_url="https://www.suse.com/security/cve/CVE-2012-3524" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1287-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1418-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1228-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-09/msg00038.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0111-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-01/msg00051.html" source="SUSE-SU"/>
    <description>
    libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: "we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3524/">CVE-2012-3524</cve>
	<bugzilla href="https://bugzilla.suse.com/697105">SUSE bug 697105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/852781">SUSE bug 852781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912016">SUSE bug 912016</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141377" comment="libgio-fam-2.38.2-5.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513979" comment="libgio-fam-2.48.2-12.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009107559" comment="dbus-1-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107561" comment="dbus-1-x11-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141373" comment="glib2-lang-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141374" comment="glib2-tools-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107564" comment="libdbus-1-3-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107565" comment="libdbus-1-3-32bit-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141375" comment="libgio-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141376" comment="libgio-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141377" comment="libgio-fam-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141378" comment="libglib-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141379" comment="libglib-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141380" comment="libgmodule-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141381" comment="libgmodule-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141382" comment="libgobject-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141383" comment="libgobject-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141384" comment="libgthread-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141385" comment="libgthread-2_0-0-32bit-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009107559" comment="dbus-1-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107561" comment="dbus-1-x11-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141373" comment="glib2-lang-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141374" comment="glib2-tools-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107564" comment="libdbus-1-3-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107565" comment="libdbus-1-3-32bit-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141375" comment="libgio-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141376" comment="libgio-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141378" comment="libglib-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141379" comment="libglib-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141380" comment="libgmodule-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141381" comment="libgmodule-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141382" comment="libgobject-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141383" comment="libgobject-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141384" comment="libgthread-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141385" comment="libgthread-2_0-0-32bit-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009107562" comment="dbus-1-devel-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009107560" comment="dbus-1-devel-doc-1.8.16-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144774" comment="glib2-devel-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144775" comment="glib2-devel-static-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141377" comment="libgio-fam-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140535" comment="dbus-1-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140536" comment="dbus-1-x11-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140537" comment="libdbus-1-3-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140538" comment="libdbus-1-3-32bit-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140609" comment="libgio-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140611" comment="libglib-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140613" comment="libgmodule-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140615" comment="libgobject-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140617" comment="libgthread-2_0-0-32bit-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140535" comment="dbus-1-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140536" comment="dbus-1-x11-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140537" comment="libdbus-1-3-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140538" comment="libdbus-1-3-32bit-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140609" comment="libgio-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140611" comment="libglib-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140613" comment="libgmodule-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140615" comment="libgobject-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140617" comment="libgthread-2_0-0-32bit-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140535" comment="dbus-1-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140536" comment="dbus-1-x11-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140537" comment="libdbus-1-3-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141293" comment="dbus-1-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141294" comment="dbus-1-x11-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141373" comment="glib2-lang-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141374" comment="glib2-tools-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141295" comment="libdbus-1-3-1.8.8-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141296" comment="libdbus-1-3-32bit-1.8.8-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141375" comment="libgio-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141376" comment="libgio-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141377" comment="libgio-fam-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141378" comment="libglib-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141379" comment="libglib-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141380" comment="libgmodule-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141381" comment="libgmodule-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141382" comment="libgobject-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141383" comment="libgobject-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141384" comment="libgthread-2_0-0-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141385" comment="libgthread-2_0-0-32bit-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141293" comment="dbus-1-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141294" comment="dbus-1-x11-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143186" comment="glib2-lang-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143187" comment="glib2-tools-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143158" comment="libdbus-1-3-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141296" comment="libdbus-1-3-32bit-1.8.8-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143188" comment="libgio-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141376" comment="libgio-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143189" comment="libglib-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141379" comment="libglib-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143190" comment="libgmodule-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141381" comment="libgmodule-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143191" comment="libgobject-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141383" comment="libgobject-2_0-0-32bit-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143192" comment="libgthread-2_0-0-2.38.2-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141385" comment="libgthread-2_0-0-32bit-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144728" comment="dbus-1-devel-1.8.8-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144729" comment="dbus-1-devel-doc-1.8.8-1.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144774" comment="glib2-devel-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144775" comment="glib2-devel-static-2.38.2-5.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141377" comment="libgio-fam-2.38.2-5.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145215" comment="dbus-1-devel-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145216" comment="dbus-1-devel-doc-1.8.16-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145240" comment="glib2-devel-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145241" comment="glib2-devel-static-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158960" comment="dbus-1-1.8.22-28.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158961" comment="dbus-1-x11-1.8.22-28.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158962" comment="libdbus-1-3-1.8.22-28.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158963" comment="libdbus-1-3-32bit-1.8.22-28.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140609" comment="libgio-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140611" comment="libglib-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140613" comment="libgmodule-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140615" comment="libgobject-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140617" comment="libgthread-2_0-0-32bit-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158960" comment="dbus-1-1.8.22-28.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158961" comment="dbus-1-x11-1.8.22-28.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158962" comment="libdbus-1-3-1.8.22-28.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158963" comment="libdbus-1-3-32bit-1.8.22-28.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140609" comment="libgio-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140611" comment="libglib-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140613" comment="libgmodule-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140615" comment="libgobject-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140617" comment="libgthread-2_0-0-32bit-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159748" comment="dbus-1-devel-1.8.22-28.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159749" comment="dbus-1-devel-doc-1.8.22-28.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145240" comment="glib2-devel-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145241" comment="glib2-devel-static-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512109" comment="dbus-1-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512110" comment="dbus-1-x11-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512111" comment="libdbus-1-3-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512112" comment="libdbus-1-3-32bit-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140609" comment="libgio-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140611" comment="libglib-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140613" comment="libgmodule-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140615" comment="libgobject-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140617" comment="libgthread-2_0-0-32bit-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512109" comment="dbus-1-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512110" comment="dbus-1-x11-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140606" comment="glib2-lang-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140607" comment="glib2-tools-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512111" comment="libdbus-1-3-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512112" comment="libdbus-1-3-32bit-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140608" comment="libgio-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140609" comment="libgio-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140610" comment="libglib-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140611" comment="libglib-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140612" comment="libgmodule-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140613" comment="libgmodule-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140614" comment="libgobject-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140615" comment="libgobject-2_0-0-32bit-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140616" comment="libgthread-2_0-0-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140617" comment="libgthread-2_0-0-32bit-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512790" comment="dbus-1-1.8.22-9.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512791" comment="dbus-1-x11-1.8.22-9.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512865" comment="glib2-lang-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512866" comment="glib2-tools-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512792" comment="libdbus-1-3-1.8.22-9.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512793" comment="libdbus-1-3-32bit-1.8.22-9.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512867" comment="libgio-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512868" comment="libgio-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512869" comment="libglib-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512870" comment="libglib-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512871" comment="libgmodule-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512872" comment="libgmodule-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512873" comment="libgobject-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512874" comment="libgobject-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512875" comment="libgthread-2_0-0-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512876" comment="libgthread-2_0-0-32bit-2.48.2-12.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513644" comment="dbus-1-devel-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513645" comment="dbus-1-devel-doc-1.8.22-29.10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145240" comment="glib2-devel-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145241" comment="glib2-devel-static-2.48.2-10.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142107" comment="libgio-fam-2.48.2-10.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513931" comment="dbus-1-devel-1.8.22-9.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513932" comment="dbus-1-devel-doc-1.8.22-9.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513977" comment="glib2-devel-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513978" comment="glib2-devel-static-2.48.2-12.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513979" comment="libgio-fam-2.48.2-12.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3539</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3539" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3539" ref_url="https://www.suse.com/security/cve/CVE-2012-3539" source="SUSE CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4681. Reason: This candidate is a duplicate of CVE-2012-4681. Notes: All CVE users should reference CVE-2012-4681 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3539/">CVE-2012-3539</cve>
	<bugzilla href="https://bugzilla.suse.com/777499">SUSE bug 777499</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333987" comment="java-1_7_0-openjdk is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333987" comment="java-1_7_0-openjdk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335518" comment="java-1_7_0-openjdk-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335519" comment="java-1_7_0-openjdk-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335209" comment="java-1_7_0-openjdk-headless is affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3547</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3547" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3547" ref_url="https://www.suse.com/security/cve/CVE-2012-3547" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1200-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00023.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via a long "not after" timestamp in a client certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3547/">CVE-2012-3547</cve>
	<bugzilla href="https://bugzilla.suse.com/777834">SUSE bug 777834</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144740" comment="freeradius-server-devel-3.0.3-3.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145022" comment="freeradius-server-devel-3.0.3-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159757" comment="freeradius-server-devel-3.0.14-1.8 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513657" comment="freeradius-server-devel-3.0.15-2.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513947" comment="freeradius-server-devel-3.0.19-1.48 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140576" comment="freeradius-server-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140577" comment="freeradius-server-doc-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140578" comment="freeradius-server-krb5-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140579" comment="freeradius-server-ldap-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140580" comment="freeradius-server-libs-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140581" comment="freeradius-server-mysql-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140582" comment="freeradius-server-perl-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140583" comment="freeradius-server-postgresql-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140584" comment="freeradius-server-python-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140585" comment="freeradius-server-sqlite-3.0.3-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140586" comment="freeradius-server-utils-3.0.3-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143177" comment="freeradius-server-3.0.3-3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143178" comment="freeradius-server-doc-3.0.3-3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143179" comment="freeradius-server-libs-3.0.3-3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143180" comment="freeradius-server-utils-3.0.3-3.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158981" comment="freeradius-server-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158982" comment="freeradius-server-doc-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158983" comment="freeradius-server-krb5-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158984" comment="freeradius-server-ldap-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158985" comment="freeradius-server-libs-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158986" comment="freeradius-server-mysql-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158987" comment="freeradius-server-perl-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158988" comment="freeradius-server-postgresql-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158989" comment="freeradius-server-python-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158990" comment="freeradius-server-sqlite-3.0.14-1.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158991" comment="freeradius-server-utils-3.0.14-1.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334570" comment="freeradius-server is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336275" comment="freeradius-server-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336276" comment="freeradius-server-krb5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336277" comment="freeradius-server-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336278" comment="freeradius-server-libs is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336279" comment="freeradius-server-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336280" comment="freeradius-server-perl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336281" comment="freeradius-server-postgresql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336282" comment="freeradius-server-python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336283" comment="freeradius-server-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336284" comment="freeradius-server-utils is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512848" comment="freeradius-server-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512849" comment="freeradius-server-doc-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512850" comment="freeradius-server-krb5-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512851" comment="freeradius-server-ldap-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512852" comment="freeradius-server-libs-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512853" comment="freeradius-server-mysql-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512854" comment="freeradius-server-perl-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512855" comment="freeradius-server-postgresql-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512856" comment="freeradius-server-python-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512857" comment="freeradius-server-sqlite-3.0.19-1.48 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512858" comment="freeradius-server-utils-3.0.19-1.48 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513496" comment="freeradius-server-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513497" comment="freeradius-server-doc-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513498" comment="freeradius-server-krb5-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513499" comment="freeradius-server-ldap-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513500" comment="freeradius-server-libs-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513501" comment="freeradius-server-mysql-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513502" comment="freeradius-server-perl-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513503" comment="freeradius-server-postgresql-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513504" comment="freeradius-server-python-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513505" comment="freeradius-server-sqlite-3.0.15-2.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513506" comment="freeradius-server-utils-3.0.15-2.8.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3548</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3548" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3548" ref_url="https://www.suse.com/security/cve/CVE-2012-3548" source="SUSE CVE"/>
    <description>
    The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a small value for a certain length field in a capture file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3548/">CVE-2012-3548</cve>
	<bugzilla href="https://bugzilla.suse.com/778000">SUSE bug 778000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/783275">SUSE bug 783275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3552</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3552" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3552" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3552" ref_url="https://www.suse.com/security/cve/CVE-2012-3552" source="SUSE CVE"/>
    <description>
    Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending packets to an application that sets socket options during the handling of network traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-3552/">CVE-2012-3552</cve>
	<bugzilla href="https://bugzilla.suse.com/778460">SUSE bug 778460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/827565">SUSE bug 827565</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3570</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3570" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3570" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3570" ref_url="https://www.suse.com/security/cve/CVE-2012-3570" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000210.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3570/">CVE-2012-3570</cve>
	<bugzilla href="https://bugzilla.suse.com/772924">SUSE bug 772924</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3571</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3571" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3571" ref_url="https://www.suse.com/security/cve/CVE-2012-3571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000212.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html" source="SUSE-SU"/>
    <description>
    ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3571/">CVE-2012-3571</cve>
	<bugzilla href="https://bugzilla.suse.com/772924">SUSE bug 772924</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3817</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3817" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3817" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3817" ref_url="https://www.suse.com/security/cve/CVE-2012-3817" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000231.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1048-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000232.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1048-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000233.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0969-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3817/">CVE-2012-3817</cve>
	<bugzilla href="https://bugzilla.suse.com/772945">SUSE bug 772945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3864</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Advanced Systems Management 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3864" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3864" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3864" ref_url="https://www.suse.com/security/cve/CVE-2012-3864" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0891-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html" source="SUSE-SU"/>
    <description>
    Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3864/">CVE-2012-3864</cve>
	<bugzilla href="https://bugzilla.suse.com/770828">SUSE bug 770828</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-adv-systems-management:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142149" comment="puppet-3.8.5-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159708" comment="puppet-3.8.5-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172606" comment="puppet-3.8.5-15.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147499" comment="SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147500" comment="puppet-server-3.6.2-3.62 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3865</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Advanced Systems Management 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3865" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3865" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3865" ref_url="https://www.suse.com/security/cve/CVE-2012-3865" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0891-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html" source="SUSE-SU"/>
    <description>
    Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. (dot dot) in a node name.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3865/">CVE-2012-3865</cve>
	<bugzilla href="https://bugzilla.suse.com/770829">SUSE bug 770829</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-adv-systems-management:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142149" comment="puppet-3.8.5-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159708" comment="puppet-3.8.5-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172606" comment="puppet-3.8.5-15.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147499" comment="SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147500" comment="puppet-server-3.6.2-3.62 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3866</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Advanced Systems Management 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3866" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3866" ref_url="https://www.suse.com/security/cve/CVE-2012-3866" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:0891-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html" source="SUSE-SU"/>
    <description>
    lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3866/">CVE-2012-3866</cve>
	<bugzilla href="https://bugzilla.suse.com/770827">SUSE bug 770827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-adv-systems-management:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142149" comment="puppet-3.8.5-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159708" comment="puppet-3.8.5-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172606" comment="puppet-3.8.5-15.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147499" comment="SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147500" comment="puppet-server-3.6.2-3.62 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3867</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Advanced Systems Management 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3867" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3867" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3867" ref_url="https://www.suse.com/security/cve/CVE-2012-3867" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:0983-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0891-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html" source="SUSE-SU"/>
    <description>
    lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier for user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3867/">CVE-2012-3867</cve>
	<bugzilla href="https://bugzilla.suse.com/770833">SUSE bug 770833</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-adv-systems-management:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142149" comment="puppet-3.8.5-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159708" comment="puppet-3.8.5-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009172606" comment="puppet-3.8.5-15.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147499" comment="SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141776" comment="puppet-3.6.2-3.62 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147500" comment="puppet-server-3.6.2-3.62 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3868</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3868" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3868" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3868" ref_url="https://www.suse.com/security/cve/CVE-2012-3868" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0666-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00077.html" source="SUSE-SU"/>
    <description>
    Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3868/">CVE-2012-3868</cve>
	<bugzilla href="https://bugzilla.suse.com/772946">SUSE bug 772946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3954</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3954" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3954" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3954" ref_url="https://www.suse.com/security/cve/CVE-2012-3954" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1002-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000210.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000211.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-August/000212.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1006-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00030.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3954/">CVE-2012-3954</cve>
	<bugzilla href="https://bugzilla.suse.com/772924">SUSE bug 772924</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3955</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3955" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3955" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3955" ref_url="https://www.suse.com/security/cve/CVE-2012-3955" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-October/000274.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1234-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1252-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00103.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1254-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-09/msg00105.html" source="SUSE-SU"/>
    <description>
    ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3955/">CVE-2012-3955</cve>
	<bugzilla href="https://bugzilla.suse.com/780167">SUSE bug 780167</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130041" comment="dhcp-devel-4.3.3-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144731" comment="dhcp-devel-4.2.6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145021" comment="dhcp-devel-4.3.3-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173803" comment="dhcp-devel-4.3.3-10.14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513933" comment="dhcp-devel-4.3.3-10.16.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130042" comment="dhcp-relay-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130043" comment="dhcp-server-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130039" comment="dhcp-4.3.3-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130040" comment="dhcp-client-4.3.3-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143159" comment="dhcp-relay-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143160" comment="dhcp-server-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141297" comment="dhcp-4.2.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141298" comment="dhcp-client-4.2.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143329" comment="dhcp-relay-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143330" comment="dhcp-server-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141857" comment="dhcp-4.3.3-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141858" comment="dhcp-client-4.3.3-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173792" comment="dhcp-relay-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173793" comment="dhcp-server-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009173784" comment="dhcp-4.3.3-10.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009173785" comment="dhcp-client-4.3.3-10.14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512794" comment="dhcp-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512795" comment="dhcp-client-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512796" comment="dhcp-relay-4.3.3-10.16.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512797" comment="dhcp-server-4.3.3-10.16.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3956</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3956" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3956" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3956" ref_url="https://www.suse.com/security/cve/CVE-2012-3956" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3956/">CVE-2012-3956</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3957</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3957" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3957" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3957" ref_url="https://www.suse.com/security/cve/CVE-2012-3957" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3957/">CVE-2012-3957</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3958</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3958" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3958" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3958" ref_url="https://www.suse.com/security/cve/CVE-2012-3958" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3958/">CVE-2012-3958</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3959</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3959" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3959" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3959" ref_url="https://www.suse.com/security/cve/CVE-2012-3959" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3959/">CVE-2012-3959</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3960</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3960" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3960" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3960" ref_url="https://www.suse.com/security/cve/CVE-2012-3960" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3960/">CVE-2012-3960</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3961</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3961" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3961" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3961" ref_url="https://www.suse.com/security/cve/CVE-2012-3961" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3961/">CVE-2012-3961</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3962</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3962" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3962" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3962" ref_url="https://www.suse.com/security/cve/CVE-2012-3962" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through the characters in a text run, which allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3962/">CVE-2012-3962</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3963</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3963" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3963" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3963" ref_url="https://www.suse.com/security/cve/CVE-2012-3963" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3963/">CVE-2012-3963</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3964</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3964" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3964" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3964" ref_url="https://www.suse.com/security/cve/CVE-2012-3964" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3964/">CVE-2012-3964</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3965</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3965" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3965" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3965" ref_url="https://www.suse.com/security/cve/CVE-2012-3965" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3965/">CVE-2012-3965</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3966</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3966" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3966" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3966" ref_url="https://www.suse.com/security/cve/CVE-2012-3966" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a negative height value in a BMP image within a .ICO file, related to (1) improper handling of the transparency bitmask by the nsICODecoder component and (2) improper processing of the alpha channel by the nsBMPDecoder component.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3966/">CVE-2012-3966</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3967</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3967" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3967" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3967" ref_url="https://www.suse.com/security/cve/CVE-2012-3967" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3967/">CVE-2012-3967</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3968</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3968" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3968" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3968" ref_url="https://www.suse.com/security/cve/CVE-2012-3968" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via vectors related to deletion of a fragment shader by its accessor.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3968/">CVE-2012-3968</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3969</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3969" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3969" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3969" ref_url="https://www.suse.com/security/cve/CVE-2012-3969" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via a crafted SVG filter that triggers an incorrect sum calculation, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3969/">CVE-2012-3969</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3970</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3970" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3970" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3970" ref_url="https://www.suse.com/security/cve/CVE-2012-3970" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3970/">CVE-2012-3970</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3971</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3971" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3971" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3971" ref_url="https://www.suse.com/security/cve/CVE-2012-3971" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the (1) Silf::readClassMap and (2) Pass::readPass functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3971/">CVE-2012-3971</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3972</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3972" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3972" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3972" ref_url="https://www.suse.com/security/cve/CVE-2012-3972" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3972/">CVE-2012-3972</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3973</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3973" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3973" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3973" ref_url="https://www.suse.com/security/cve/CVE-2012-3973" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
    <description>
    The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3973/">CVE-2012-3973</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3975</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3975" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3975" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3975" ref_url="https://www.suse.com/security/cve/CVE-2012-3975" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3975/">CVE-2012-3975</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3976</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3976" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3976" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3976" ref_url="https://www.suse.com/security/cve/CVE-2012-3976" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3976/">CVE-2012-3976</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3978</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3978" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3978" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3978" ref_url="https://www.suse.com/security/cve/CVE-2012-3978" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3978/">CVE-2012-3978</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3980</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3980" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3980" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3980" ref_url="https://www.suse.com/security/cve/CVE-2012-3980" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1167-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1064-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1065-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-08/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3980/">CVE-2012-3980</cve>
	<bugzilla href="https://bugzilla.suse.com/777588">SUSE bug 777588</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3982</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3982" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3982" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3982" ref_url="https://www.suse.com/security/cve/CVE-2012-3982" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3982/">CVE-2012-3982</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3983</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3983" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3983" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3983" ref_url="https://www.suse.com/security/cve/CVE-2012-3983" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3983/">CVE-2012-3983</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3984</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3984" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3984" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3984" ref_url="https://www.suse.com/security/cve/CVE-2012-3984" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3984/">CVE-2012-3984</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3985</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3985" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3985" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3985" ref_url="https://www.suse.com/security/cve/CVE-2012-3985" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging initial-origin access after document.domain has been set.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3985/">CVE-2012-3985</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3986</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3986" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3986" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3986" ref_url="https://www.suse.com/security/cve/CVE-2012-3986" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3986/">CVE-2012-3986</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3988</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3988" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3988" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3988" ref_url="https://www.suse.com/security/cve/CVE-2012-3988" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3988/">CVE-2012-3988</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3989</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3989" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3989" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3989" ref_url="https://www.suse.com/security/cve/CVE-2012-3989" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on a JavaScript object, which allows remote attackers to execute arbitrary code or cause a denial of service (assertion failure) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3989/">CVE-2012-3989</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3990</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3990" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3990" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3990" ref_url="https://www.suse.com/security/cve/CVE-2012-3990" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3990/">CVE-2012-3990</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3991</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3991" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3991" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3991" ref_url="https://www.suse.com/security/cve/CVE-2012-3991" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3991/">CVE-2012-3991</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3992</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3992" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3992" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3992" ref_url="https://www.suse.com/security/cve/CVE-2012-3992" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3992/">CVE-2012-3992</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3993</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3993" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3993" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3993" ref_url="https://www.suse.com/security/cve/CVE-2012-3993" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3993/">CVE-2012-3993</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3994</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3994" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3994" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3994" ref_url="https://www.suse.com/security/cve/CVE-2012-3994" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3994/">CVE-2012-3994</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3995</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-3995" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3995" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-3995" ref_url="https://www.suse.com/security/cve/CVE-2012-3995" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3995/">CVE-2012-3995</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4024</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4024" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4024" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4024" ref_url="https://www.suse.com/security/cve/CVE-2012-4024" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file (aka a crafted file for the -ef option).  NOTE: probably in most cases, the list file is a trusted file constructed by the program's user; however, there are some realistic situations in which a list file would be obtained from an untrusted remote source.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4024/">CVE-2012-4024</cve>
	<bugzilla href="https://bugzilla.suse.com/773015">SUSE bug 773015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141126" comment="squashfs-4.3-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141805" comment="squashfs-4.3-1.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143295" comment="squashfs-4.3-1.9 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4025</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4025" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4025" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4025" ref_url="https://www.suse.com/security/cve/CVE-2012-4025" source="SUSE CVE"/>
    <description>
    Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4025/">CVE-2012-4025</cve>
	<bugzilla href="https://bugzilla.suse.com/773015">SUSE bug 773015</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141126" comment="squashfs-4.3-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141805" comment="squashfs-4.3-1.15 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143295" comment="squashfs-4.3-1.9 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4048</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4048" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4048" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4048" ref_url="https://www.suse.com/security/cve/CVE-2012-4048" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0930-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00000.html" source="SUSE-SU"/>
    <description>
    The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon dump.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4048/">CVE-2012-4048</cve>
	<bugzilla href="https://bugzilla.suse.com/772738">SUSE bug 772738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4049</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4049" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4049" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4049" ref_url="https://www.suse.com/security/cve/CVE-2012-4049" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:0930-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00000.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4049/">CVE-2012-4049</cve>
	<bugzilla href="https://bugzilla.suse.com/772738">SUSE bug 772738</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4179</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4179" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4179" ref_url="https://www.suse.com/security/cve/CVE-2012-4179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4179/">CVE-2012-4179</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4180</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4180" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4180" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4180" ref_url="https://www.suse.com/security/cve/CVE-2012-4180" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4180/">CVE-2012-4180</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4181</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4181" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4181" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4181" ref_url="https://www.suse.com/security/cve/CVE-2012-4181" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4181/">CVE-2012-4181</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4182</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4182" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4182" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4182" ref_url="https://www.suse.com/security/cve/CVE-2012-4182" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4182/">CVE-2012-4182</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4183</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4183" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4183" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4183" ref_url="https://www.suse.com/security/cve/CVE-2012-4183" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4183/">CVE-2012-4183</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4184</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4184" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4184" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4184" ref_url="https://www.suse.com/security/cve/CVE-2012-4184" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4184/">CVE-2012-4184</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4185</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4185" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4185" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4185" ref_url="https://www.suse.com/security/cve/CVE-2012-4185" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4185/">CVE-2012-4185</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4186</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4186" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4186" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4186" ref_url="https://www.suse.com/security/cve/CVE-2012-4186" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4186/">CVE-2012-4186</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4187</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4187" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4187" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4187" ref_url="https://www.suse.com/security/cve/CVE-2012-4187" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4187/">CVE-2012-4187</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4188</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4188" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4188" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4188" ref_url="https://www.suse.com/security/cve/CVE-2012-4188" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4188/">CVE-2012-4188</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4191</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4191" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4191" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4191" ref_url="https://www.suse.com/security/cve/CVE-2012-4191" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4191/">CVE-2012-4191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4192</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4192" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4192" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4192" ref_url="https://www.suse.com/security/cve/CVE-2012-4192" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4192/">CVE-2012-4192</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4193</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4193" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4193" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4193" ref_url="https://www.suse.com/security/cve/CVE-2012-4193" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1345-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4193/">CVE-2012-4193</cve>
	<bugzilla href="https://bugzilla.suse.com/783533">SUSE bug 783533</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4194</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4194" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4194" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4194" ref_url="https://www.suse.com/security/cve/CVE-2012-4194" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4194/">CVE-2012-4194</cve>
	<bugzilla href="https://bugzilla.suse.com/786522">SUSE bug 786522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4195</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4195" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4195" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4195" ref_url="https://www.suse.com/security/cve/CVE-2012-4195" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and principal in its return value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site, and makes it easier for remote attackers to execute arbitrary JavaScript code by leveraging certain add-on behavior.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4195/">CVE-2012-4195</cve>
	<bugzilla href="https://bugzilla.suse.com/786522">SUSE bug 786522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4196</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4196" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4196" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4196" ref_url="https://www.suse.com/security/cve/CVE-2012-4196" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1412-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats certain protection mechanisms for this object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4196/">CVE-2012-4196</cve>
	<bugzilla href="https://bugzilla.suse.com/786522">SUSE bug 786522</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4201</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4201" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4201" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4201" ref_url="https://www.suse.com/security/cve/CVE-2012-4201" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code that sets the location.href property, which allows remote attackers to conduct cross-site scripting (XSS) attacks or read arbitrary files by leveraging a sandboxed add-on.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4201/">CVE-2012-4201</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4202</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4202" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4202" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4202" ref_url="https://www.suse.com/security/cve/CVE-2012-4202" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4202/">CVE-2012-4202</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4203</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4203" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4203" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4203" ref_url="https://www.suse.com/security/cve/CVE-2012-4203" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
    <description>
    The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote attackers to run arbitrary programs by leveraging a javascript: URL in a bookmark.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4203/">CVE-2012-4203</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4204</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4204" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4204" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4204" ref_url="https://www.suse.com/security/cve/CVE-2012-4204" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4204/">CVE-2012-4204</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4205</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4205" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4205" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4205" ref_url="https://www.suse.com/security/cve/CVE-2012-4205" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4205/">CVE-2012-4205</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4207</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4207" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4207" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4207" ref_url="https://www.suse.com/security/cve/CVE-2012-4207" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly handle a ~ (tilde) character in proximity to a chunk delimiter, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4207/">CVE-2012-4207</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4208</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4208" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4208" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4208" ref_url="https://www.suse.com/security/cve/CVE-2012-4208" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 does not consider the compartment during property filtering, which allows remote attackers to bypass intended chrome-only restrictions on reading DOM object properties via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4208/">CVE-2012-4208</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4209</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4209" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4209" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4209" ref_url="https://www.suse.com/security/cve/CVE-2012-4209" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4209/">CVE-2012-4209</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4210</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4210" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4210" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4210" ref_url="https://www.suse.com/security/cve/CVE-2012-4210" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
    <description>
    The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted stylesheet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4210/">CVE-2012-4210</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4212</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4212" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4212" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4212" ref_url="https://www.suse.com/security/cve/CVE-2012-4212" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4212/">CVE-2012-4212</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4213</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4213" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4213" ref_url="https://www.suse.com/security/cve/CVE-2012-4213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsEditor::FindNextLeafNode function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4213/">CVE-2012-4213</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4214</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4214" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4214" ref_url="https://www.suse.com/security/cve/CVE-2012-4214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-5840.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4214/">CVE-2012-4214</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4215</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4215" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4215" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4215" ref_url="https://www.suse.com/security/cve/CVE-2012-4215" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4215/">CVE-2012-4215</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4216</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4216" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4216" ref_url="https://www.suse.com/security/cve/CVE-2012-4216" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4216/">CVE-2012-4216</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4217</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4217" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4217" ref_url="https://www.suse.com/security/cve/CVE-2012-4217" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdates function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4217/">CVE-2012-4217</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4218</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4218" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4218" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4218" ref_url="https://www.suse.com/security/cve/CVE-2012-4218" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4218/">CVE-2012-4218</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4244</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4244" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4244" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4244" ref_url="https://www.suse.com/security/cve/CVE-2012-4244" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1192-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4244/">CVE-2012-4244</cve>
	<bugzilla href="https://bugzilla.suse.com/780157">SUSE bug 780157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4285</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4285" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4285" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4285" ref_url="https://www.suse.com/security/cve/CVE-2012-4285" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4285/">CVE-2012-4285</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4286</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4286" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4286" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4286" ref_url="https://www.suse.com/security/cve/CVE-2012-4286" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4286/">CVE-2012-4286</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4287</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4287" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4287" ref_url="https://www.suse.com/security/cve/CVE-2012-4287" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4287/">CVE-2012-4287</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4288</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4288" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4288" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4288" ref_url="https://www.suse.com/security/cve/CVE-2012-4288" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4288/">CVE-2012-4288</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4289</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4289" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4289" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4289" ref_url="https://www.suse.com/security/cve/CVE-2012-4289" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4289/">CVE-2012-4289</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4290</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4290" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4290" ref_url="https://www.suse.com/security/cve/CVE-2012-4290" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4290/">CVE-2012-4290</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4291</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4291" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4291" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4291" ref_url="https://www.suse.com/security/cve/CVE-2012-4291" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4291/">CVE-2012-4291</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4292</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4292" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4292" ref_url="https://www.suse.com/security/cve/CVE-2012-4292" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4292/">CVE-2012-4292</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4293</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4293" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4293" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4293" ref_url="https://www.suse.com/security/cve/CVE-2012-4293" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly handle certain integer fields, which allows remote attackers to cause a denial of service (application exit) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4293/">CVE-2012-4293</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4294</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4294" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4294" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4294" ref_url="https://www.suse.com/security/cve/CVE-2012-4294" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4294/">CVE-2012-4294</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4295</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4295" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4295" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4295" ref_url="https://www.suse.com/security/cve/CVE-2012-4295" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4295/">CVE-2012-4295</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4296</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4296" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4296" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4296" ref_url="https://www.suse.com/security/cve/CVE-2012-4296" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1168-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-September/000256.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1035-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4296/">CVE-2012-4296</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4297</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4297" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4297" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4297" ref_url="https://www.suse.com/security/cve/CVE-2012-4297" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4297/">CVE-2012-4297</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4298</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4298" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4298" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4298" ref_url="https://www.suse.com/security/cve/CVE-2012-4298" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1067-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-08/msg00047.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4298/">CVE-2012-4298</cve>
	<bugzilla href="https://bugzilla.suse.com/776083">SUSE bug 776083</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4398</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4398" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4398" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4398" ref_url="https://www.suse.com/security/cve/CVE-2012-4398" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:1693-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00027.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1693-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1695-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-01/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0481-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0566-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html" source="SUSE-SU"/>
    <description>
    The __request_module function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service (memory consumption) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4398/">CVE-2012-4398</cve>
	<bugzilla href="https://bugzilla.suse.com/778463">SUSE bug 778463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/779488">SUSE bug 779488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4411</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4411" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4411" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4411" ref_url="https://www.suse.com/security/cve/CVE-2012-4411" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html" source="SUSE-SU"/>
    <description>
    The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4411/">CVE-2012-4411</cve>
	<bugzilla href="https://bugzilla.suse.com/779212">SUSE bug 779212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786516">SUSE bug 786516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786518">SUSE bug 786518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786519">SUSE bug 786519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786520">SUSE bug 786520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787163">SUSE bug 787163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4412</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4412" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4412" ref_url="https://www.suse.com/security/cve/CVE-2012-4412" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1119-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4412/">CVE-2012-4412</cve>
	<bugzilla href="https://bugzilla.suse.com/779320">SUSE bug 779320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/848783">SUSE bug 848783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920169">SUSE bug 920169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920338">SUSE bug 920338</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144776" comment="glibc-devel-static-2.19-17.72 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140628" comment="glibc-profile-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141386" comment="glibc-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141387" comment="glibc-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141388" comment="glibc-devel-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141389" comment="glibc-devel-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141390" comment="glibc-i18ndata-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141391" comment="glibc-locale-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141392" comment="glibc-locale-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141393" comment="nscd-2.19-17.72 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141386" comment="glibc-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141387" comment="glibc-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141388" comment="glibc-devel-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141389" comment="glibc-devel-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143193" comment="glibc-html-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141390" comment="glibc-i18ndata-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143194" comment="glibc-info-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141391" comment="glibc-locale-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141392" comment="glibc-locale-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143195" comment="glibc-profile-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143196" comment="glibc-profile-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141393" comment="nscd-2.19-17.72 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141868" comment="glibc-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141869" comment="glibc-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141870" comment="glibc-devel-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141871" comment="glibc-devel-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141872" comment="glibc-i18ndata-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141873" comment="glibc-locale-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141874" comment="glibc-locale-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141875" comment="nscd-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141868" comment="glibc-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141869" comment="glibc-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141870" comment="glibc-devel-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141871" comment="glibc-devel-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143333" comment="glibc-html-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141872" comment="glibc-i18ndata-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143334" comment="glibc-info-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141873" comment="glibc-locale-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141874" comment="glibc-locale-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143335" comment="glibc-profile-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143336" comment="glibc-profile-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141875" comment="nscd-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145037" comment="glibc-devel-static-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143334" comment="glibc-info-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145242" comment="glibc-devel-static-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156986" comment="glibc-html-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156988" comment="glibc-profile-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157048" comment="glibc-profile-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157042" comment="glibc-devel-static-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513507" comment="glibc-html-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513509" comment="glibc-profile-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513510" comment="glibc-profile-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512877" comment="glibc-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512878" comment="glibc-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512879" comment="glibc-devel-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512880" comment="glibc-devel-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512881" comment="glibc-html-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512882" comment="glibc-i18ndata-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512884" comment="glibc-locale-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512885" comment="glibc-locale-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512886" comment="glibc-profile-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512887" comment="glibc-profile-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512888" comment="nscd-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513676" comment="glibc-devel-static-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513980" comment="glibc-devel-static-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4416</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4416" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4416" ref_url="https://www.suse.com/security/cve/CVE-2012-4416" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4416/">CVE-2012-4416</cve>
	<bugzilla href="https://bugzilla.suse.com/779714">SUSE bug 779714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4425</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4425" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4425" ref_url="https://www.suse.com/security/cve/CVE-2012-4425" source="SUSE CVE"/>
    <description>
    libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4425/">CVE-2012-4425</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140943" comment="libspice-client-glib-2_0-8-0.31-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140944" comment="libspice-client-glib-helper-0.31-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140945" comment="libspice-client-gtk-2_0-4-0.31-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140946" comment="libspice-client-gtk-3_0-4-0.31-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140947" comment="libspice-controller0-0.31-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140948" comment="typelib-1_0-SpiceClientGlib-2_0-0.31-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140949" comment="typelib-1_0-SpiceClientGtk-3_0-0.31-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141691" comment="libspice-client-glib-2_0-8-0.25-3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141692" comment="libspice-client-gtk-2_0-4-0.25-3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141693" comment="libspice-client-gtk-3_0-4-0.25-3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141694" comment="libspice-controller0-0.25-3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141695" comment="typelib-1_0-SpiceClientGlib-2_0-0.25-3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141696" comment="typelib-1_0-SpiceClientGtk-3_0-0.25-3.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142011" comment="libspice-client-glib-2_0-8-0.29-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142012" comment="libspice-client-gtk-2_0-4-0.29-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142013" comment="libspice-client-gtk-3_0-4-0.29-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142014" comment="libspice-controller0-0.29-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142015" comment="typelib-1_0-SpiceClientGlib-2_0-0.29-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142016" comment="typelib-1_0-SpiceClientGtk-3_0-0.29-1.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144991" comment="spice-gtk-devel-0.25-3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144992" comment="typelib-1_0-SpiceClientGtk-2_0-0.25-3.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145184" comment="spice-gtk-devel-0.29-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145185" comment="typelib-1_0-SpiceClientGtk-2_0-0.29-1.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145365" comment="spice-gtk-devel-0.31-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145366" comment="typelib-1_0-SpiceClientGtk-2_0-0.31-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159196" comment="libspice-client-glib-2_0-8-0.33-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159197" comment="libspice-client-glib-helper-0.33-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159198" comment="libspice-client-gtk-3_0-5-0.33-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159199" comment="libspice-controller0-0.33-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159200" comment="typelib-1_0-SpiceClientGlib-2_0-0.33-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159201" comment="typelib-1_0-SpiceClientGtk-3_0-0.33-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159837" comment="spice-gtk-devel-0.33-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159201" comment="typelib-1_0-SpiceClientGtk-3_0-0.33-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512476" comment="libspice-client-glib-2_0-8-0.33-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512477" comment="libspice-client-glib-helper-0.33-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512478" comment="libspice-client-gtk-3_0-5-0.33-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512479" comment="libspice-controller0-0.33-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512480" comment="typelib-1_0-SpiceClientGlib-2_0-0.33-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512481" comment="typelib-1_0-SpiceClientGtk-3_0-0.33-3.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513881" comment="spice-gtk-devel-0.33-3.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512481" comment="typelib-1_0-SpiceClientGtk-3_0-0.33-3.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4433</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4433" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4433" ref_url="https://www.suse.com/security/cve/CVE-2012-4433" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002693.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-March/002695.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0159-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00054.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0828-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-03/msg00093.html" source="SUSE-SU"/>
    <description>
    Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4433/">CVE-2012-4433</cve>
	<bugzilla href="https://bugzilla.suse.com/1023636">SUSE bug 1023636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1028070">SUSE bug 1028070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089725">SUSE bug 1089725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/789835">SUSE bug 789835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149576" comment="gegl-0_2-0.2.0-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149577" comment="gegl-0_2-lang-0.2.0-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149578" comment="libgegl-0_2-0-0.2.0-14.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149585" comment="gegl-devel-0.2.0-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149578" comment="libgegl-0_2-0-0.2.0-14.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009517165" comment="gegl-0_2-0.2.0-10.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009517166" comment="gegl-0_2-lang-0.2.0-10.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009517167" comment="libgegl-0_2-0-0.2.0-10.3.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009518486" comment="gegl-0_2-0.2.0-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009518487" comment="gegl-0_2-lang-0.2.0-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009518488" comment="libgegl-0_2-0-0.2.0-14.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009540593" comment="gegl-devel-0.2.0-10.3.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009540594" comment="libgegl-0_2-0-0.2.0-10.3.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009541150" comment="gegl-devel-0.2.0-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541151" comment="libgegl-0_2-0-0.2.0-14.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792121" comment="gegl-devel-0.2.0-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792122" comment="libgegl-0_2-0-0.2.0-14.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792123" comment="gegl-0_2-0.2.0-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792124" comment="gegl-0_2-lang-0.2.0-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792122" comment="libgegl-0_2-0-0.2.0-14.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4444</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4444" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4444" ref_url="https://www.suse.com/security/cve/CVE-2012-4444" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0856-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The ip6_frag_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping IPv6 fragments.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4444/">CVE-2012-4444</cve>
	<bugzilla href="https://bugzilla.suse.com/789831">SUSE bug 789831</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4453</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4453" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4453" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4453" ref_url="https://www.suse.com/security/cve/CVE-2012-4453" source="SUSE CVE"/>
    <description>
    dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4453/">CVE-2012-4453</cve>
	<bugzilla href="https://bugzilla.suse.com/1008340">SUSE bug 1008340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/782734">SUSE bug 782734</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009138243" comment="dracut-037-66.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140546" comment="dracut-044-87.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141301" comment="dracut-037-34.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158969" comment="dracut-044-113.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512113" comment="dracut-044.1-9.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009138243" comment="dracut-037-66.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143331" comment="dracut-fips-037-66.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140546" comment="dracut-044-87.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140547" comment="dracut-fips-044-87.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141301" comment="dracut-037-34.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143162" comment="dracut-fips-037-34.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158969" comment="dracut-044-113.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158970" comment="dracut-fips-044-113.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512113" comment="dracut-044.1-9.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513495" comment="dracut-fips-044.1-9.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512809" comment="dracut-044.2-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512810" comment="dracut-fips-044.2-15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4461</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4461" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4461" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4461" ref_url="https://www.suse.com/security/cve/CVE-2012-4461" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4461/">CVE-2012-4461</cve>
	<bugzilla href="https://bugzilla.suse.com/787821">SUSE bug 787821</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4467</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4467" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4467" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4467" ref_url="https://www.suse.com/security/cve/CVE-2012-4467" source="SUSE CVE"/>
    <description>
    The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a crafted ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4467/">CVE-2012-4467</cve>
	<bugzilla href="https://bugzilla.suse.com/783608">SUSE bug 783608</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4502</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4502" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4502" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4502" ref_url="https://www.suse.com/security/cve/CVE-2012-4502" source="SUSE CVE"/>
    <description>
    Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service (crash) via a crafted (1) REQ_SUBNETS_ACCESSED or (2) REQ_CLIENT_ACCESSES command request to the PKL_CommandLength function or crafted (3) RPY_SUBNETS_ACCESSED, (4) RPY_CLIENT_ACCESSES, (5) RPY_CLIENT_ACCESSES_BY_INDEX, or (6) RPY_MANUAL_LIST command reply to the PKL_ReplyLength function, which triggers an out-of-bounds read or buffer overflow.  NOTE: versions 1.27 and 1.28 do not require authentication to exploit.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4502/">CVE-2012-4502</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140487" comment="chrony-2.3-3.110 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512758" comment="chrony-2.3-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4503</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4503" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4503" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4503" ref_url="https://www.suse.com/security/cve/CVE-2012-4503" source="SUSE CVE"/>
    <description>
    cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4503/">CVE-2012-4503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140487" comment="chrony-2.3-3.110 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512758" comment="chrony-2.3-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4504</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4504" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4504" ref_url="https://www.suse.com/security/cve/CVE-2012-4504" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1375-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00065.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4504/">CVE-2012-4504</cve>
	<bugzilla href="https://bugzilla.suse.com/784523">SUSE bug 784523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141600" comment="libproxy1-networkmanager-32bit-0.4.11-11.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142142" comment="libproxy1-networkmanager-32bit-0.4.13-16.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144915" comment="libproxy-devel-0.4.11-11.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145316" comment="libproxy-devel-0.4.13-16.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140909" comment="libproxy1-0.4.13-16.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140910" comment="libproxy1-32bit-0.4.13-16.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140911" comment="libproxy1-config-gnome3-0.4.13-16.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140912" comment="libproxy1-config-gnome3-32bit-0.4.13-16.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140913" comment="libproxy1-networkmanager-0.4.13-16.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140914" comment="libproxy1-pacrunner-webkit-0.4.13-16.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140909" comment="libproxy1-0.4.13-16.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140910" comment="libproxy1-32bit-0.4.13-16.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140911" comment="libproxy1-config-gnome3-0.4.13-16.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140912" comment="libproxy1-config-gnome3-32bit-0.4.13-16.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140913" comment="libproxy1-networkmanager-0.4.13-16.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142142" comment="libproxy1-networkmanager-32bit-0.4.13-16.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140914" comment="libproxy1-pacrunner-webkit-0.4.13-16.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140909" comment="libproxy1-0.4.13-16.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140911" comment="libproxy1-config-gnome3-0.4.13-16.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140913" comment="libproxy1-networkmanager-0.4.13-16.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140914" comment="libproxy1-pacrunner-webkit-0.4.13-16.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141595" comment="libproxy1-0.4.11-11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141596" comment="libproxy1-32bit-0.4.11-11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141597" comment="libproxy1-config-gnome3-0.4.11-11.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141598" comment="libproxy1-config-gnome3-32bit-0.4.11-11.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141599" comment="libproxy1-networkmanager-0.4.11-11.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141600" comment="libproxy1-networkmanager-32bit-0.4.11-11.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141595" comment="libproxy1-0.4.11-11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141596" comment="libproxy1-32bit-0.4.11-11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141597" comment="libproxy1-config-gnome3-0.4.11-11.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141598" comment="libproxy1-config-gnome3-32bit-0.4.11-11.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141599" comment="libproxy1-networkmanager-0.4.11-11.6 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4508</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4508" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4508" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4508" ref_url="https://www.suse.com/security/cve/CVE-2012-4508" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
    <description>
    Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4508/">CVE-2012-4508</cve>
	<bugzilla href="https://bugzilla.suse.com/784192">SUSE bug 784192</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4510</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4510" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4510" ref_url="https://www.suse.com/security/cve/CVE-2012-4510" source="SUSE CVE"/>
    <description>
    cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4510/">CVE-2012-4510</cve>
	<bugzilla href="https://bugzilla.suse.com/783488">SUSE bug 783488</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333931" comment="cups-pk-helper is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009138209" comment="cups-pk-helper-0.2.5-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009138210" comment="cups-pk-helper-lang-0.2.5-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140514" comment="cups-pk-helper-0.2.5-3.75 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140515" comment="cups-pk-helper-lang-0.2.5-3.75 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147515" comment="cups-pk-helper-0.2.5-3.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147516" comment="cups-pk-helper-lang-0.2.5-3.72 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333931" comment="cups-pk-helper is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334795" comment="cups-pk-helper-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334796" comment="python-cupshelpers is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333932" comment="system-config-printer is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334797" comment="system-config-printer-common is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334798" comment="system-config-printer-common-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334799" comment="system-config-printer-dbus-service is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334800" comment="udev-configure-printer is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333931" comment="cups-pk-helper is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334795" comment="cups-pk-helper-lang is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4524</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4524" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4524" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4524" ref_url="https://www.suse.com/security/cve/CVE-2012-4524" source="SUSE CVE"/>
    <description>
    xlockmore before 5.43 'dclock' security bypass vulnerability
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2012-4524/">CVE-2012-4524</cve>
	<bugzilla href="https://bugzilla.suse.com/1160775">SUSE bug 1160775</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338837" comment="xlockmore is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4530</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4530" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4530" ref_url="https://www.suse.com/security/cve/CVE-2012-4530" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4530/">CVE-2012-4530</cve>
	<bugzilla href="https://bugzilla.suse.com/786013">SUSE bug 786013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4535</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4535" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4535" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4535" ref_url="https://www.suse.com/security/cve/CVE-2012-4535" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4535/">CVE-2012-4535</cve>
	<bugzilla href="https://bugzilla.suse.com/779212">SUSE bug 779212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786516">SUSE bug 786516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786518">SUSE bug 786518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786519">SUSE bug 786519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786520">SUSE bug 786520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787163">SUSE bug 787163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4536</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4536" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4536" ref_url="https://www.suse.com/security/cve/CVE-2012-4536" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html" source="SUSE-SU"/>
    <description>
    The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4536/">CVE-2012-4536</cve>
	<bugzilla href="https://bugzilla.suse.com/779212">SUSE bug 779212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786516">SUSE bug 786516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786518">SUSE bug 786518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786519">SUSE bug 786519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786520">SUSE bug 786520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787163">SUSE bug 787163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4537</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4537" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4537" ref_url="https://www.suse.com/security/cve/CVE-2012-4537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4537/">CVE-2012-4537</cve>
	<bugzilla href="https://bugzilla.suse.com/779212">SUSE bug 779212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786516">SUSE bug 786516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786517">SUSE bug 786517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786518">SUSE bug 786518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786519">SUSE bug 786519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786520">SUSE bug 786520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787163">SUSE bug 787163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4538</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4538" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4538" ref_url="https://www.suse.com/security/cve/CVE-2012-4538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html" source="SUSE-SU"/>
    <description>
    The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4538/">CVE-2012-4538</cve>
	<bugzilla href="https://bugzilla.suse.com/779212">SUSE bug 779212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786516">SUSE bug 786516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786518">SUSE bug 786518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786519">SUSE bug 786519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786520">SUSE bug 786520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787163">SUSE bug 787163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4539</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4539" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4539" ref_url="https://www.suse.com/security/cve/CVE-2012-4539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html" source="SUSE-SU"/>
    <description>
    Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4539/">CVE-2012-4539</cve>
	<bugzilla href="https://bugzilla.suse.com/779212">SUSE bug 779212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786516">SUSE bug 786516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786518">SUSE bug 786518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786519">SUSE bug 786519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786520">SUSE bug 786520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787163">SUSE bug 787163</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4540</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4540" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4540" ref_url="https://www.suse.com/security/cve/CVE-2012-4540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-November/000301.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1520-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-10/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1524-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0174-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00065.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1509-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1511-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00073.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1595-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00019.html" source="SUSE-SU"/>
    <description>
    Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4540/">CVE-2012-4540</cve>
	<bugzilla href="https://bugzilla.suse.com/787846">SUSE bug 787846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/840572">SUSE bug 840572</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141421" comment="java-1_7_0-openjdk-plugin-1.5.1-1.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114769" comment="java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141887" comment="java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159646" comment="java-1_7_0-openjdk-plugin-1.6.2-2.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159647" comment="java-1_8_0-openjdk-plugin-1.6.2-2.10.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4542</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4542" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4542" ref_url="https://www.suse.com/security/cve/CVE-2012-4542" source="SUSE CVE"/>
    <description>
    block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioctl call that leverages overlapping opcodes.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4542/">CVE-2012-4542</cve>
	<bugzilla href="https://bugzilla.suse.com/807154">SUSE bug 807154</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4544</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4544" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4544" ref_url="https://www.suse.com/security/cve/CVE-2012-4544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1487-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1503-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0411-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1572-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1573-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html" source="SUSE-SU"/>
    <description>
    The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4544/">CVE-2012-4544</cve>
	<bugzilla href="https://bugzilla.suse.com/779212">SUSE bug 779212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786516">SUSE bug 786516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786518">SUSE bug 786518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786519">SUSE bug 786519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786520">SUSE bug 786520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787163">SUSE bug 787163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/840592">SUSE bug 840592</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4559</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4559" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4559" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4559" ref_url="https://www.suse.com/security/cve/CVE-2012-4559" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1622-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0130-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4) sftp_parse_attr_3 function in sftp.c, and (5) try_publickey_from_file function in keyfiles.c in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4559/">CVE-2012-4559</cve>
	<bugzilla href="https://bugzilla.suse.com/789827">SUSE bug 789827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114957" comment="libssh4-0.6.3-8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123868" comment="libssh4-0.6.3-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141697" comment="libssh4-0.6.3-1.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114955" comment="libssh-devel-0.6.3-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114956" comment="libssh-devel-doc-0.6.3-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114957" comment="libssh4-0.6.3-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009123873" comment="libssh-devel-0.6.3-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123874" comment="libssh-devel-doc-0.6.3-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123868" comment="libssh4-0.6.3-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144933" comment="libssh-devel-0.6.3-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144934" comment="libssh-devel-doc-0.6.3-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141697" comment="libssh4-0.6.3-1.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512484" comment="libssh4-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512485" comment="libssh4-32bit-0.6.3-12.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513235" comment="libssh4-0.8.7-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513236" comment="libssh4-32bit-0.8.7-1.31 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513831" comment="libssh-devel-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513832" comment="libssh-devel-doc-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512484" comment="libssh4-0.6.3-12.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514184" comment="libssh-devel-0.8.7-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513832" comment="libssh-devel-doc-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513235" comment="libssh4-0.8.7-1.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4560</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4560" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4560" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4560" ref_url="https://www.suse.com/security/cve/CVE-2012-4560" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1622-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0130-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4560/">CVE-2012-4560</cve>
	<bugzilla href="https://bugzilla.suse.com/789827">SUSE bug 789827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114957" comment="libssh4-0.6.3-8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123868" comment="libssh4-0.6.3-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141697" comment="libssh4-0.6.3-1.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114955" comment="libssh-devel-0.6.3-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114956" comment="libssh-devel-doc-0.6.3-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114957" comment="libssh4-0.6.3-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009123873" comment="libssh-devel-0.6.3-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123874" comment="libssh-devel-doc-0.6.3-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123868" comment="libssh4-0.6.3-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144933" comment="libssh-devel-0.6.3-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144934" comment="libssh-devel-doc-0.6.3-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141697" comment="libssh4-0.6.3-1.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512484" comment="libssh4-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512485" comment="libssh4-32bit-0.6.3-12.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513235" comment="libssh4-0.8.7-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513236" comment="libssh4-32bit-0.8.7-1.31 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513831" comment="libssh-devel-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513832" comment="libssh-devel-doc-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512484" comment="libssh4-0.6.3-12.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514184" comment="libssh-devel-0.8.7-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513832" comment="libssh-devel-doc-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513235" comment="libssh4-0.8.7-1.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4561</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4561" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4561" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4561" ref_url="https://www.suse.com/security/cve/CVE-2012-4561" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1622-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0130-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html" source="SUSE-SU"/>
    <description>
    The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service (crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4561/">CVE-2012-4561</cve>
	<bugzilla href="https://bugzilla.suse.com/789827">SUSE bug 789827</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114957" comment="libssh4-0.6.3-8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123868" comment="libssh4-0.6.3-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141697" comment="libssh4-0.6.3-1.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114955" comment="libssh-devel-0.6.3-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114956" comment="libssh-devel-doc-0.6.3-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114957" comment="libssh4-0.6.3-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009123873" comment="libssh-devel-0.6.3-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123874" comment="libssh-devel-doc-0.6.3-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123868" comment="libssh4-0.6.3-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144933" comment="libssh-devel-0.6.3-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144934" comment="libssh-devel-doc-0.6.3-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141697" comment="libssh4-0.6.3-1.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512484" comment="libssh4-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512485" comment="libssh4-32bit-0.6.3-12.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513235" comment="libssh4-0.8.7-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513236" comment="libssh4-32bit-0.8.7-1.31 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513831" comment="libssh-devel-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513832" comment="libssh-devel-doc-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512484" comment="libssh4-0.6.3-12.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514184" comment="libssh-devel-0.8.7-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513832" comment="libssh-devel-doc-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513235" comment="libssh4-0.8.7-1.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4564</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4564" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4564" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4564" ref_url="https://www.suse.com/security/cve/CVE-2012-4564" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-January/000333.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1639-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000623.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0187-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00076.html" source="SUSE-SU"/>
    <description>
    ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4564/">CVE-2012-4564</cve>
	<bugzilla href="https://bugzilla.suse.com/781995">SUSE bug 781995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787892">SUSE bug 787892</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791607">SUSE bug 791607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854393">SUSE bug 854393</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114058" comment="libtiff-devel-4.0.4-12.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131764" comment="libtiff-devel-4.0.6-26.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144946" comment="libtiff-devel-4.0.3-9.78 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154451" comment="libtiff-devel-4.0.7-43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513834" comment="libtiff-devel-4.0.9-44.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514199" comment="libtiff-devel-4.0.9-44.30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114061" comment="tiff-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114060" comment="libtiff5-4.0.4-12.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114059" comment="libtiff5-32bit-4.0.4-12.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131043" comment="libtiff5-32bit-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131042" comment="libtiff5-4.0.6-26.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131044" comment="tiff-4.0.6-26.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143258" comment="tiff-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141703" comment="libtiff5-4.0.3-9.78 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141704" comment="libtiff5-32bit-4.0.3-9.78 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154405" comment="tiff-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154403" comment="libtiff5-4.0.7-43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154404" comment="libtiff5-32bit-4.0.7-43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334793" comment="libtiff5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334794" comment="libtiff5-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333930" comment="tiff is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513550" comment="tiff-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512495" comment="libtiff5-4.0.9-44.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512496" comment="libtiff5-32bit-4.0.9-44.24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513250" comment="libtiff5-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513251" comment="libtiff5-32bit-4.0.9-44.30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513252" comment="tiff-4.0.9-44.30.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4565</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4565" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4565" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4565" ref_url="https://www.suse.com/security/cve/CVE-2012-4565" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000339.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcp_congestion_control illinois setting is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) by reading TCP stats.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4565/">CVE-2012-4565</cve>
	<bugzilla href="https://bugzilla.suse.com/787576">SUSE bug 787576</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4681</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4681" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4681" ref_url="https://www.suse.com/security/cve/CVE-2012-4681" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1231-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1154-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00008.html" source="SUSE-SU"/>
    <description>
    Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4681/">CVE-2012-4681</cve>
	<bugzilla href="https://bugzilla.suse.com/777499">SUSE bug 777499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/778629">SUSE bug 778629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/780897">SUSE bug 780897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798324">SUSE bug 798324</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4929</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-4929" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4929" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-4929" ref_url="https://www.suse.com/security/cve/CVE-2012-4929" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-October/000289.html" source="SUSE-SU"/>
		<reference ref_id="TID7014254" ref_url="https://www.suse.com/support/kb/doc/?id=7014254" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1420-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-10/msg00096.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0143-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0157-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00048.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1630-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00005.html" source="SUSE-SU"/>
    <description>
    The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-01"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4929/">CVE-2012-4929</cve>
	<bugzilla href="https://bugzilla.suse.com/1011293">SUSE bug 1011293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/779952">SUSE bug 779952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/793420">SUSE bug 793420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803004">SUSE bug 803004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/847895">SUSE bug 847895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125285" comment="libqt4-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125286" comment="libqt4-devel-doc-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125287" comment="libqt4-devel-doc-data-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125288" comment="libqt4-linguist-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125289" comment="libqt4-private-headers-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141157" comment="w3m-0.5.3-157.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131037" comment="wget-1.14-10.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141157" comment="w3m-0.5.3-157.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131037" comment="wget-1.14-10.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141157" comment="w3m-0.5.3-157.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131037" comment="wget-1.14-10.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141612" comment="libqt4-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141614" comment="libqt4-qt3support-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141616" comment="libqt4-sql-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141622" comment="libqt4-sql-sqlite-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141626" comment="libqt4-x11-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141825" comment="w3m-0.5.3-153.145 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141826" comment="wget-1.14-4.83 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141825" comment="w3m-0.5.3-153.145 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102008" comment="wget-1.14-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113422" comment="qt4-x11-tools-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141825" comment="w3m-0.5.3-153.145 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102008" comment="wget-1.14-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143250" comment="libqt4-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143251" comment="libqt4-qt3support-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143252" comment="libqt4-sql-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143253" comment="libqt4-sql-sqlite-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143254" comment="libqt4-x11-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143255" comment="qt4-x11-tools-4.8.6-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141825" comment="w3m-0.5.3-153.145 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141826" comment="wget-1.14-4.83 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144917" comment="libqt4-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144918" comment="libqt4-devel-doc-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144919" comment="libqt4-devel-doc-data-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144920" comment="libqt4-linguist-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144921" comment="libqt4-private-headers-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113432" comment="libqt4-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113420" comment="libqt4-devel-doc-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113421" comment="libqt4-devel-doc-data-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113433" comment="libqt4-linguist-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113434" comment="libqt4-private-headers-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125285" comment="libqt4-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125286" comment="libqt4-devel-doc-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125287" comment="libqt4-devel-doc-data-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125288" comment="libqt4-linguist-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125289" comment="libqt4-private-headers-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149815" comment="wget-1.14-20.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149815" comment="wget-1.14-20.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513220" comment="qt4-x11-tools-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177348" comment="wget-1.14-21.7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009177348" comment="wget-1.14-21.7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513819" comment="libqt4-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513820" comment="libqt4-devel-doc-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513821" comment="libqt4-devel-doc-data-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513822" comment="libqt4-linguist-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513823" comment="libqt4-private-headers-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513220" comment="qt4-x11-tools-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513442" comment="w3m-0.5.3.git20161120-161.3.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513443" comment="wget-1.14-21.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513819" comment="libqt4-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513820" comment="libqt4-devel-doc-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513821" comment="libqt4-devel-doc-data-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513822" comment="libqt4-linguist-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513823" comment="libqt4-private-headers-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5068</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5068" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5068" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5068" ref_url="https://www.suse.com/security/cve/CVE-2012-5068" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5068/">CVE-2012-5068</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5069</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5069" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5069" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5069" ref_url="https://www.suse.com/security/cve/CVE-2012-5069" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Concurrency.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5069/">CVE-2012-5069</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5070</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5070" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5070" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5070" ref_url="https://www.suse.com/security/cve/CVE-2012-5070" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5070/">CVE-2012-5070</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5071</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5071" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5071" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5071" ref_url="https://www.suse.com/security/cve/CVE-2012-5071" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality and integrity, related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5071/">CVE-2012-5071</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5072</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5072" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5072" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5072" ref_url="https://www.suse.com/security/cve/CVE-2012-5072" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5072/">CVE-2012-5072</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5073</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5073" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5073" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5073" ref_url="https://www.suse.com/security/cve/CVE-2012-5073" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5079.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5073/">CVE-2012-5073</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5074</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5074" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5074" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5074" ref_url="https://www.suse.com/security/cve/CVE-2012-5074" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5074/">CVE-2012-5074</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5075</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5075" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5075" ref_url="https://www.suse.com/security/cve/CVE-2012-5075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5075/">CVE-2012-5075</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5076</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5076" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5076" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5076" ref_url="https://www.suse.com/security/cve/CVE-2012-5076" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5076/">CVE-2012-5076</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5077</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5077" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5077" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5077" ref_url="https://www.suse.com/security/cve/CVE-2012-5077" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5077/">CVE-2012-5077</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5079</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5079" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5079" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5079" ref_url="https://www.suse.com/security/cve/CVE-2012-5079" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries, a different vulnerability than CVE-2012-5073.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5079/">CVE-2012-5079</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5081</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5081" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5081" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5081" ref_url="https://www.suse.com/security/cve/CVE-2012-5081" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5081/">CVE-2012-5081</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5083</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5083" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5083" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5083" ref_url="https://www.suse.com/security/cve/CVE-2012-5083" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5083/">CVE-2012-5083</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5084</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5084" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5084" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5084" ref_url="https://www.suse.com/security/cve/CVE-2012-5084" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5084/">CVE-2012-5084</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5085</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5085" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5085" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5085" ref_url="https://www.suse.com/security/cve/CVE-2012-5085" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote authenticated users to have an unspecified impact via unknown vectors related to Networking.  NOTE: the Oracle CPU states that this issue has a 0.0 CVSS score. If so, then this is not a vulnerability and this issue should not be included in CVE.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5085/">CVE-2012-5085</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5086</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5086" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5086" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5086" ref_url="https://www.suse.com/security/cve/CVE-2012-5086" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5086/">CVE-2012-5086</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5087</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5087" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5087" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5087" ref_url="https://www.suse.com/security/cve/CVE-2012-5087" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5087/">CVE-2012-5087</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5088</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5088" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5088" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5088" ref_url="https://www.suse.com/security/cve/CVE-2012-5088" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5088/">CVE-2012-5088</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5089</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5089" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5089" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5089" ref_url="https://www.suse.com/security/cve/CVE-2012-5089" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1398-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1419-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1423-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1424-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00024.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-3143.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5089/">CVE-2012-5089</cve>
	<bugzilla href="https://bugzilla.suse.com/785429">SUSE bug 785429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785433">SUSE bug 785433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/785814">SUSE bug 785814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/788750">SUSE bug 788750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5112</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5112" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5112" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5112" ref_url="https://www.suse.com/security/cve/CVE-2012-5112" source="SUSE CVE"/>
    <description>
    Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5112/">CVE-2012-5112</cve>
	<bugzilla href="https://bugzilla.suse.com/786698">SUSE bug 786698</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108618" comment="libjavascriptcoregtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108619" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108628" comment="libjavascriptcoregtk-3_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108620" comment="libwebkitgtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108621" comment="libwebkitgtk-1_0-0-32bit-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108631" comment="libwebkitgtk-3_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108623" comment="libwebkitgtk2-lang-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108634" comment="libwebkitgtk3-lang-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108635" comment="typelib-1_0-JavaScriptCore-3_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108636" comment="typelib-1_0-WebKit-3_0-2.4.8-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108618" comment="libjavascriptcoregtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108619" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108620" comment="libwebkitgtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108621" comment="libwebkitgtk-1_0-0-32bit-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108623" comment="libwebkitgtk2-lang-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108635" comment="typelib-1_0-JavaScriptCore-3_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108636" comment="typelib-1_0-WebKit-3_0-2.4.8-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108618" comment="libjavascriptcoregtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108620" comment="libwebkitgtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108622" comment="libwebkitgtk-devel-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108633" comment="libwebkitgtk3-devel-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108624" comment="typelib-1_0-JavaScriptCore-1_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108635" comment="typelib-1_0-JavaScriptCore-3_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108625" comment="typelib-1_0-WebKit-1_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108636" comment="typelib-1_0-WebKit-3_0-2.4.8-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108628" comment="libjavascriptcoregtk-3_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108631" comment="libwebkitgtk-3_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108634" comment="libwebkitgtk3-lang-2.4.8-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140862" comment="libjavascriptcoregtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140863" comment="libwebkitgtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140864" comment="libwebkitgtk3-lang-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141549" comment="libjavascriptcoregtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141550" comment="libjavascriptcoregtk-1_0-0-32bit-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141551" comment="libjavascriptcoregtk-3_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141552" comment="libwebkit2gtk-3_0-25-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141553" comment="libwebkitgtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141554" comment="libwebkitgtk-1_0-0-32bit-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141555" comment="libwebkitgtk-3_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141556" comment="libwebkitgtk2-lang-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141557" comment="libwebkitgtk3-lang-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141558" comment="typelib-1_0-JavaScriptCore-3_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141559" comment="typelib-1_0-WebKit-3_0-2.2.7-3.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141549" comment="libjavascriptcoregtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141550" comment="libjavascriptcoregtk-1_0-0-32bit-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141552" comment="libwebkit2gtk-3_0-25-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141553" comment="libwebkitgtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141554" comment="libwebkitgtk-1_0-0-32bit-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141556" comment="libwebkitgtk2-lang-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141558" comment="typelib-1_0-JavaScriptCore-3_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141559" comment="typelib-1_0-WebKit-3_0-2.2.7-3.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141549" comment="libjavascriptcoregtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141552" comment="libwebkit2gtk-3_0-25-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141553" comment="libwebkitgtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144876" comment="libwebkitgtk-devel-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144877" comment="libwebkitgtk3-devel-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144878" comment="typelib-1_0-JavaScriptCore-1_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141558" comment="typelib-1_0-JavaScriptCore-3_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144879" comment="typelib-1_0-WebKit-1_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141559" comment="typelib-1_0-WebKit-3_0-2.2.7-3.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141551" comment="libjavascriptcoregtk-3_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141555" comment="libwebkitgtk-3_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141557" comment="libwebkitgtk3-lang-2.2.7-3.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142132" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142134" comment="libwebkitgtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142135" comment="libwebkitgtk2-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142132" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140862" comment="libjavascriptcoregtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142134" comment="libwebkitgtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140863" comment="libwebkitgtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142135" comment="libwebkitgtk2-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140864" comment="libwebkitgtk3-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142132" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140862" comment="libjavascriptcoregtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142134" comment="libwebkitgtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140863" comment="libwebkitgtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142135" comment="libwebkitgtk2-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140864" comment="libwebkitgtk3-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142132" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142134" comment="libwebkitgtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142135" comment="libwebkitgtk2-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145302" comment="libwebkitgtk-devel-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145303" comment="libwebkitgtk3-devel-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145304" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145305" comment="typelib-1_0-WebKit-1_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145135" comment="libwebkit2gtk-3_0-25-2.2.7-3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145302" comment="libwebkitgtk-devel-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145303" comment="libwebkitgtk3-devel-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145304" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145305" comment="typelib-1_0-WebKit-1_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5133</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5133" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5133" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5133" ref_url="https://www.suse.com/security/cve/CVE-2012-5133" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5133/">CVE-2012-5133</cve>
	<bugzilla href="https://bugzilla.suse.com/791234">SUSE bug 791234</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108618" comment="libjavascriptcoregtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108619" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108628" comment="libjavascriptcoregtk-3_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108620" comment="libwebkitgtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108621" comment="libwebkitgtk-1_0-0-32bit-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108631" comment="libwebkitgtk-3_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108623" comment="libwebkitgtk2-lang-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108634" comment="libwebkitgtk3-lang-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108635" comment="typelib-1_0-JavaScriptCore-3_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108636" comment="typelib-1_0-WebKit-3_0-2.4.8-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108618" comment="libjavascriptcoregtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108619" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108620" comment="libwebkitgtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108621" comment="libwebkitgtk-1_0-0-32bit-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108623" comment="libwebkitgtk2-lang-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108635" comment="typelib-1_0-JavaScriptCore-3_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108636" comment="typelib-1_0-WebKit-3_0-2.4.8-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108618" comment="libjavascriptcoregtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108620" comment="libwebkitgtk-1_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108622" comment="libwebkitgtk-devel-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108633" comment="libwebkitgtk3-devel-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108624" comment="typelib-1_0-JavaScriptCore-1_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108635" comment="typelib-1_0-JavaScriptCore-3_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108625" comment="typelib-1_0-WebKit-1_0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108636" comment="typelib-1_0-WebKit-3_0-2.4.8-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009108628" comment="libjavascriptcoregtk-3_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108631" comment="libwebkitgtk-3_0-0-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108634" comment="libwebkitgtk3-lang-2.4.8-16.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140862" comment="libjavascriptcoregtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140863" comment="libwebkitgtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140864" comment="libwebkitgtk3-lang-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141549" comment="libjavascriptcoregtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141550" comment="libjavascriptcoregtk-1_0-0-32bit-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141551" comment="libjavascriptcoregtk-3_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141552" comment="libwebkit2gtk-3_0-25-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141553" comment="libwebkitgtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141554" comment="libwebkitgtk-1_0-0-32bit-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141555" comment="libwebkitgtk-3_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141556" comment="libwebkitgtk2-lang-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141557" comment="libwebkitgtk3-lang-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141558" comment="typelib-1_0-JavaScriptCore-3_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141559" comment="typelib-1_0-WebKit-3_0-2.2.7-3.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141549" comment="libjavascriptcoregtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141550" comment="libjavascriptcoregtk-1_0-0-32bit-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141552" comment="libwebkit2gtk-3_0-25-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141553" comment="libwebkitgtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141554" comment="libwebkitgtk-1_0-0-32bit-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141556" comment="libwebkitgtk2-lang-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141558" comment="typelib-1_0-JavaScriptCore-3_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141559" comment="typelib-1_0-WebKit-3_0-2.2.7-3.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141549" comment="libjavascriptcoregtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141552" comment="libwebkit2gtk-3_0-25-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141553" comment="libwebkitgtk-1_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144876" comment="libwebkitgtk-devel-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144877" comment="libwebkitgtk3-devel-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144878" comment="typelib-1_0-JavaScriptCore-1_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141558" comment="typelib-1_0-JavaScriptCore-3_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144879" comment="typelib-1_0-WebKit-1_0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141559" comment="typelib-1_0-WebKit-3_0-2.2.7-3.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141551" comment="libjavascriptcoregtk-3_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141555" comment="libwebkitgtk-3_0-0-2.2.7-3.63 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141557" comment="libwebkitgtk3-lang-2.2.7-3.63 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142132" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142134" comment="libwebkitgtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142135" comment="libwebkitgtk2-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142132" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140862" comment="libjavascriptcoregtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108630" comment="libwebkit2gtk-3_0-25-2.4.8-16.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142134" comment="libwebkitgtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140863" comment="libwebkitgtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142135" comment="libwebkitgtk2-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140864" comment="libwebkitgtk3-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142132" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140862" comment="libjavascriptcoregtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142134" comment="libwebkitgtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140863" comment="libwebkitgtk-3_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142135" comment="libwebkitgtk2-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140864" comment="libwebkitgtk3-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142132" comment="libjavascriptcoregtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142134" comment="libwebkitgtk-1_0-0-32bit-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142135" comment="libwebkitgtk2-lang-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145302" comment="libwebkitgtk-devel-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145303" comment="libwebkitgtk3-devel-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145304" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145305" comment="typelib-1_0-WebKit-1_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142131" comment="libjavascriptcoregtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145135" comment="libwebkit2gtk-3_0-25-2.2.7-3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142133" comment="libwebkitgtk-1_0-0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145302" comment="libwebkitgtk-devel-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145303" comment="libwebkitgtk3-devel-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145304" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142136" comment="typelib-1_0-JavaScriptCore-3_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145305" comment="typelib-1_0-WebKit-1_0-2.4.11-23.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142137" comment="typelib-1_0-WebKit-3_0-2.4.11-23.20 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5134</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5134" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5134" ref_url="https://www.suse.com/security/cve/CVE-2012-5134" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1636-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1637-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0178-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00023.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5134/">CVE-2012-5134</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791234">SUSE bug 791234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/793334">SUSE bug 793334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/795039">SUSE bug 795039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804033">SUSE bug 804033</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103734" comment="libxml2-devel-2.9.1-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144964" comment="libxml2-devel-2.9.1-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145350" comment="libxml2-devel-2.9.4-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157778" comment="libxml2-devel-2.9.4-45.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513851" comment="libxml2-devel-2.9.4-46.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514210" comment="libxml2-devel-2.9.4-46.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103736" comment="libxml2-doc-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103738" comment="python-libxml2-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103738" comment="python-libxml2-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141083" comment="python-libxml2-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141788" comment="python-libxml2-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143262" comment="libxml2-doc-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141788" comment="python-libxml2-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157771" comment="python-libxml2-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157775" comment="libxml2-doc-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157771" comment="python-libxml2-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512597" comment="python-libxml2-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513557" comment="libxml2-doc-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512597" comment="python-libxml2-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513309" comment="libxml2-2-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513310" comment="libxml2-2-32bit-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513311" comment="libxml2-doc-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513312" comment="libxml2-tools-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513367" comment="python-libxml2-2.9.4-46.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5166</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5166" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5166" ref_url="https://www.suse.com/security/cve/CVE-2012-5166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1390-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1390-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1390-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1372-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5166/">CVE-2012-5166</cve>
	<bugzilla href="https://bugzilla.suse.com/784602">SUSE bug 784602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5237</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5237" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5237" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5237" ref_url="https://www.suse.com/security/cve/CVE-2012-5237" source="SUSE CVE"/>
    <description>
    The dissect_hsrp function in epan/dissectors/packet-hsrp.c in the HSRP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5237/">CVE-2012-5237</cve>
	<bugzilla href="https://bugzilla.suse.com/783275">SUSE bug 783275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5238</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5238" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5238" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5238" ref_url="https://www.suse.com/security/cve/CVE-2012-5238" source="SUSE CVE"/>
    <description>
    epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.3 uses incorrect OUI data structures during the decoding of (1) PPP and (2) LCP data, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5238/">CVE-2012-5238</cve>
	<bugzilla href="https://bugzilla.suse.com/783275">SUSE bug 783275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5239</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5239" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5239" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5239" ref_url="https://www.suse.com/security/cve/CVE-2012-5239" source="SUSE CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-3548.  Reason: This candidate is a reservation duplicate of CVE-2012-3548.  Notes: All CVE users should reference CVE-2012-3548 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5239/">CVE-2012-5239</cve>
	<bugzilla href="https://bugzilla.suse.com/783275">SUSE bug 783275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5240</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5240" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5240" ref_url="https://www.suse.com/security/cve/CVE-2012-5240" source="SUSE CVE"/>
    <description>
    Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5240/">CVE-2012-5240</cve>
	<bugzilla href="https://bugzilla.suse.com/783275">SUSE bug 783275</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5248</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5248" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5248" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5248" ref_url="https://www.suse.com/security/cve/CVE-2012-5248" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5248/">CVE-2012-5248</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5249</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5249" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5249" ref_url="https://www.suse.com/security/cve/CVE-2012-5249" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5249/">CVE-2012-5249</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5250</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5250" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5250" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5250" ref_url="https://www.suse.com/security/cve/CVE-2012-5250" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5250/">CVE-2012-5250</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5251</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5251" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5251" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5251" ref_url="https://www.suse.com/security/cve/CVE-2012-5251" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5251/">CVE-2012-5251</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5252</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5252" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5252" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5252" ref_url="https://www.suse.com/security/cve/CVE-2012-5252" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5252/">CVE-2012-5252</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5253</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5253" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5253" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5253" ref_url="https://www.suse.com/security/cve/CVE-2012-5253" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5253/">CVE-2012-5253</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5254</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5254" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5254" ref_url="https://www.suse.com/security/cve/CVE-2012-5254" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5254/">CVE-2012-5254</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5255</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5255" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5255" ref_url="https://www.suse.com/security/cve/CVE-2012-5255" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5255/">CVE-2012-5255</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5256</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5256" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5256" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5256" ref_url="https://www.suse.com/security/cve/CVE-2012-5256" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5256/">CVE-2012-5256</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5257</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5257" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5257" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5257" ref_url="https://www.suse.com/security/cve/CVE-2012-5257" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5257/">CVE-2012-5257</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5258</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5258" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5258" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5258" ref_url="https://www.suse.com/security/cve/CVE-2012-5258" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5258/">CVE-2012-5258</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5259</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5259" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5259" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5259" ref_url="https://www.suse.com/security/cve/CVE-2012-5259" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5259/">CVE-2012-5259</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5260</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5260" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5260" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5260" ref_url="https://www.suse.com/security/cve/CVE-2012-5260" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5260/">CVE-2012-5260</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5261</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5261" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5261" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5261" ref_url="https://www.suse.com/security/cve/CVE-2012-5261" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5261/">CVE-2012-5261</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5262</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5262" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5262" ref_url="https://www.suse.com/security/cve/CVE-2012-5262" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5262/">CVE-2012-5262</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5263</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5263" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5263" ref_url="https://www.suse.com/security/cve/CVE-2012-5263" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5263/">CVE-2012-5263</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5264</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5264" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5264" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5264" ref_url="https://www.suse.com/security/cve/CVE-2012-5264" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5264/">CVE-2012-5264</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5265</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5265" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5265" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5265" ref_url="https://www.suse.com/security/cve/CVE-2012-5265" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5265/">CVE-2012-5265</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5266</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5266" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5266" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5266" ref_url="https://www.suse.com/security/cve/CVE-2012-5266" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5266/">CVE-2012-5266</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5267</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5267" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5267" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5267" ref_url="https://www.suse.com/security/cve/CVE-2012-5267" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5267/">CVE-2012-5267</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5268</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5268" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5268" ref_url="https://www.suse.com/security/cve/CVE-2012-5268" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5268/">CVE-2012-5268</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5269</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5269" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5269" ref_url="https://www.suse.com/security/cve/CVE-2012-5269" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5269/">CVE-2012-5269</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5270</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5270" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5270" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5270" ref_url="https://www.suse.com/security/cve/CVE-2012-5270" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5270/">CVE-2012-5270</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5271</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5271" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5271" ref_url="https://www.suse.com/security/cve/CVE-2012-5271" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5271/">CVE-2012-5271</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5272</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5272" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5272" ref_url="https://www.suse.com/security/cve/CVE-2012-5272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1326-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1324-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-10/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0370-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00034.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5272/">CVE-2012-5272</cve>
	<bugzilla href="https://bugzilla.suse.com/784168">SUSE bug 784168</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5274</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5274" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5274" ref_url="https://www.suse.com/security/cve/CVE-2012-5274" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, and CVE-2012-5280.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5274/">CVE-2012-5274</cve>
	<bugzilla href="https://bugzilla.suse.com/788450">SUSE bug 788450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5275</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5275" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5275" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5275" ref_url="https://www.suse.com/security/cve/CVE-2012-5275" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5276, CVE-2012-5277, and CVE-2012-5280.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5275/">CVE-2012-5275</cve>
	<bugzilla href="https://bugzilla.suse.com/788450">SUSE bug 788450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5276</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5276" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5276" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5276" ref_url="https://www.suse.com/security/cve/CVE-2012-5276" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5277, and CVE-2012-5280.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5276/">CVE-2012-5276</cve>
	<bugzilla href="https://bugzilla.suse.com/788450">SUSE bug 788450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5277</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5277" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5277" ref_url="https://www.suse.com/security/cve/CVE-2012-5277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, and CVE-2012-5280.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5277/">CVE-2012-5277</cve>
	<bugzilla href="https://bugzilla.suse.com/788450">SUSE bug 788450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5278</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5278" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5278" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5278" ref_url="https://www.suse.com/security/cve/CVE-2012-5278" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allow attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5278/">CVE-2012-5278</cve>
	<bugzilla href="https://bugzilla.suse.com/788450">SUSE bug 788450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5279</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5279" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5279" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5279" ref_url="https://www.suse.com/security/cve/CVE-2012-5279" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5279/">CVE-2012-5279</cve>
	<bugzilla href="https://bugzilla.suse.com/788450">SUSE bug 788450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125280" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5280</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5280" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5280" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5280" ref_url="https://www.suse.com/security/cve/CVE-2012-5280" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1485-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1480-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0134-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0367-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00030.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, and CVE-2012-5277.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5280/">CVE-2012-5280</cve>
	<bugzilla href="https://bugzilla.suse.com/788450">SUSE bug 788450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5468</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5468" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5468" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5468" ref_url="https://www.suse.com/security/cve/CVE-2012-5468" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00017.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5468/">CVE-2012-5468</cve>
	<bugzilla href="https://bugzilla.suse.com/792939">SUSE bug 792939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131108" comment="bogofilter-1.2.4-5.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141230" comment="bogofilter-1.2.4-3.56 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5510</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5510" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5510" ref_url="https://www.suse.com/security/cve/CVE-2012-5510" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1685-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html" source="SUSE-SU"/>
    <description>
    Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5510/">CVE-2012-5510</cve>
	<bugzilla href="https://bugzilla.suse.com/789945">SUSE bug 789945</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5511</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5511" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5511" ref_url="https://www.suse.com/security/cve/CVE-2012-5511" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1685-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5511/">CVE-2012-5511</cve>
	<bugzilla href="https://bugzilla.suse.com/789944">SUSE bug 789944</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5513</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5513" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5513" ref_url="https://www.suse.com/security/cve/CVE-2012-5513" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1606-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1685-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html" source="SUSE-SU"/>
    <description>
    The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5513/">CVE-2012-5513</cve>
	<bugzilla href="https://bugzilla.suse.com/789951">SUSE bug 789951</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5514</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5514" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5514" ref_url="https://www.suse.com/security/cve/CVE-2012-5514" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1685-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html" source="SUSE-SU"/>
    <description>
    The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5514/">CVE-2012-5514</cve>
	<bugzilla href="https://bugzilla.suse.com/789948">SUSE bug 789948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/789988">SUSE bug 789988</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5515</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5515" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5515" ref_url="https://www.suse.com/security/cve/CVE-2012-5515" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1606-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2012:1615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1685-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1687-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0133-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html" source="SUSE-SU"/>
    <description>
    The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5515/">CVE-2012-5515</cve>
	<bugzilla href="https://bugzilla.suse.com/789950">SUSE bug 789950</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5517</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5517" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5517" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5517" ref_url="https://www.suse.com/security/cve/CVE-2012-5517" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2012-December/000318.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0394-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5517/">CVE-2012-5517</cve>
	<bugzilla href="https://bugzilla.suse.com/789235">SUSE bug 789235</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5519</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5519" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5519" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5519" ref_url="https://www.suse.com/security/cve/CVE-2012-5519" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1655-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000628.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1041-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1044-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:1056-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html" source="SUSE-SU"/>
    <description>
    CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5519/">CVE-2012-5519</cve>
	<bugzilla href="https://bugzilla.suse.com/1180148">SUSE bug 1180148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/789566">SUSE bug 789566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882905">SUSE bug 882905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/924208">SUSE bug 924208</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539582" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514763" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514764" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514765" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514766" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009524933" comment="cups154-1.5.4-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009524934" comment="cups154-client-1.5.4-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009524935" comment="cups154-filters-1.5.4-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009524936" comment="cups154-libs-1.5.4-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009543581" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543582" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543583" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543584" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792125" comment="cups-ddk-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792126" comment="cups-devel-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5525</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5525" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5525" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5525" ref_url="https://www.suse.com/security/cve/CVE-2012-5525" source="SUSE CVE"/>
    <description>
    The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5525/">CVE-2012-5525</cve>
	<bugzilla href="https://bugzilla.suse.com/789952">SUSE bug 789952</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5530</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5530" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5530" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5530" ref_url="https://www.suse.com/security/cve/CVE-2012-5530" source="SUSE CVE"/>
    <description>
    The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5530/">CVE-2012-5530</cve>
	<bugzilla href="https://bugzilla.suse.com/775009">SUSE bug 775009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/782967">SUSE bug 782967</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145150" comment="libpcp-devel-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145151" comment="libpcp3-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145152" comment="pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145153" comment="pcp-import-iostat2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145154" comment="pcp-import-mrtg2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145155" comment="pcp-import-sar2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145157" comment="perl-PCP-LogImport-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145158" comment="perl-PCP-LogSummary-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145159" comment="perl-PCP-MMV-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145160" comment="perl-PCP-PMDA-3.6.10-4.97 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149944" comment="libpcp-devel-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144895" comment="libpcp3-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144896" comment="pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144897" comment="pcp-import-iostat2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144898" comment="pcp-import-mrtg2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144899" comment="pcp-import-sar2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144900" comment="pcp-import-sheet2pcp-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144901" comment="perl-PCP-LogImport-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144902" comment="perl-PCP-LogSummary-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144903" comment="perl-PCP-MMV-3.6.10-4.124 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144904" comment="perl-PCP-PMDA-3.6.10-4.124 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513755" comment="libpcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513756" comment="libpcp3-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514097" comment="libpcp_gui2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514098" comment="libpcp_import1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514099" comment="libpcp_mmv1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514100" comment="libpcp_trace2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514101" comment="libpcp_web1-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513757" comment="pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514102" comment="pcp-conf-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514103" comment="pcp-devel-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514104" comment="pcp-doc-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514105" comment="pcp-export-pcp2graphite-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514106" comment="pcp-export-pcp2influxdb-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514107" comment="pcp-export-zabbix-agent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514108" comment="pcp-gui-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514109" comment="pcp-import-collectl2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514110" comment="pcp-import-ganglia2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513758" comment="pcp-import-iostat2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513759" comment="pcp-import-mrtg2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513760" comment="pcp-import-sar2pcp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145156" comment="pcp-import-sheet2pcp-3.6.10-4.97 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514111" comment="pcp-manager-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514112" comment="pcp-pmda-activemq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514113" comment="pcp-pmda-apache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514114" comment="pcp-pmda-bash-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514115" comment="pcp-pmda-bind2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514116" comment="pcp-pmda-bonding-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514117" comment="pcp-pmda-cifs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514118" comment="pcp-pmda-cisco-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514119" comment="pcp-pmda-dbping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514120" comment="pcp-pmda-dm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514121" comment="pcp-pmda-docker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514122" comment="pcp-pmda-ds389-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514123" comment="pcp-pmda-ds389log-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514124" comment="pcp-pmda-elasticsearch-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514125" comment="pcp-pmda-gfs2-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514126" comment="pcp-pmda-gluster-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514127" comment="pcp-pmda-gpfs-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514128" comment="pcp-pmda-gpsd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514129" comment="pcp-pmda-infiniband-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514130" comment="pcp-pmda-kvm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514131" comment="pcp-pmda-libvirt-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514132" comment="pcp-pmda-lio-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514133" comment="pcp-pmda-lmsensors-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514134" comment="pcp-pmda-logger-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514135" comment="pcp-pmda-lustre-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514136" comment="pcp-pmda-lustrecomm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514137" comment="pcp-pmda-mailq-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514138" comment="pcp-pmda-memcache-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514139" comment="pcp-pmda-mic-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514140" comment="pcp-pmda-mounts-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514141" comment="pcp-pmda-mysql-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514142" comment="pcp-pmda-named-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514143" comment="pcp-pmda-netfilter-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514144" comment="pcp-pmda-news-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514145" comment="pcp-pmda-nfsclient-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514146" comment="pcp-pmda-nginx-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514147" comment="pcp-pmda-nutcracker-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514148" comment="pcp-pmda-nvidia-gpu-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514149" comment="pcp-pmda-oracle-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514150" comment="pcp-pmda-pdns-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514151" comment="pcp-pmda-perfevent-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514152" comment="pcp-pmda-postfix-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514153" comment="pcp-pmda-redis-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514154" comment="pcp-pmda-roomtemp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514155" comment="pcp-pmda-rpm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514156" comment="pcp-pmda-rsyslog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514157" comment="pcp-pmda-samba-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514158" comment="pcp-pmda-sendmail-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514159" comment="pcp-pmda-shping-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514160" comment="pcp-pmda-slurm-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514161" comment="pcp-pmda-snmp-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514162" comment="pcp-pmda-summary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514163" comment="pcp-pmda-systemd-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514164" comment="pcp-pmda-trace-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514165" comment="pcp-pmda-unbound-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514166" comment="pcp-pmda-vmware-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514167" comment="pcp-pmda-weblog-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514168" comment="pcp-pmda-zimbra-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514169" comment="pcp-pmda-zswap-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514170" comment="pcp-system-tools-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514171" comment="pcp-webapi-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513761" comment="perl-PCP-LogImport-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513762" comment="perl-PCP-LogSummary-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513763" comment="perl-PCP-MMV-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513764" comment="perl-PCP-PMDA-3.11.9-6.7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514172" comment="python-pcp-3.11.9-6.7.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5532</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5532" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5532" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5532" ref_url="https://www.suse.com/security/cve/CVE-2012-5532" source="SUSE CVE"/>
    <description>
    The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.8-rc1, allows local users to cause a denial of service (daemon exit) via a crafted application that sends a Netlink message. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2669.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5532/">CVE-2012-5532</cve>
	<bugzilla href="https://bugzilla.suse.com/791605">SUSE bug 791605</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140682" comment="hyper-v-7-13.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141886" comment="hyper-v-6-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143206" comment="hyper-v-6-7.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140682" comment="hyper-v-7-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140682" comment="hyper-v-7-13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512189" comment="hyper-v-7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512189" comment="hyper-v-7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512189" comment="hyper-v-7-7.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5576</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5576" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5576" ref_url="https://www.suse.com/security/cve/CVE-2012-5576" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000719.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0123-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00014.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5576/">CVE-2012-5576</cve>
	<bugzilla href="https://bugzilla.suse.com/791372">SUSE bug 791372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141368" comment="gimp-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141369" comment="gimp-lang-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141370" comment="gimp-plugins-python-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142102" comment="gimp-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142103" comment="gimp-lang-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142104" comment="gimp-plugins-python-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144763" comment="gimp-devel-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141371" comment="libgimp-2_0-0-2.8.10-1.164 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141372" comment="libgimpui-2_0-0-2.8.10-1.164 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145239" comment="gimp-devel-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142105" comment="libgimp-2_0-0-2.8.18-4.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142106" comment="libgimpui-2_0-0-2.8.18-4.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150803" comment="gimp-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150804" comment="gimp-lang-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150805" comment="gimp-plugins-python-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009150808" comment="gimp-devel-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150806" comment="libgimp-2_0-0-2.8.18-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009150807" comment="libgimpui-2_0-0-2.8.18-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167012" comment="gimp-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167013" comment="gimp-lang-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167014" comment="gimp-plugins-python-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009167017" comment="gimp-devel-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167015" comment="libgimp-2_0-0-2.8.18-9.3.26 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009167016" comment="libgimpui-2_0-0-2.8.18-9.3.26 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5577</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5577" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5577" ref_url="https://www.suse.com/security/cve/CVE-2012-5577" source="SUSE CVE"/>
    <description>
    Python keyring lib before 0.10 created keyring files with world-readable permissions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5577/">CVE-2012-5577</cve>
	<bugzilla href="https://bugzilla.suse.com/1155575">SUSE bug 1155575</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-public-cloud:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178199" comment="SUSE Linux Enterprise Module for Public Cloud 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338838" comment="python-keyring is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338838" comment="python-keyring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338839" comment="python3-keyring is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5578</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5578" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5578" ref_url="https://www.suse.com/security/cve/CVE-2012-5578" source="SUSE CVE"/>
    <description>
    Python keyring has insecure permissions on new databases allowing world-readable files to be created
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2012-5578/">CVE-2012-5578</cve>
	<bugzilla href="https://bugzilla.suse.com/1155575">SUSE bug 1155575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/791482">SUSE bug 791482</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-public-cloud:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178199" comment="SUSE Linux Enterprise Module for Public Cloud 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338838" comment="python-keyring is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338838" comment="python-keyring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338839" comment="python3-keyring is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5592</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5592" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5592" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5592" ref_url="https://www.suse.com/security/cve/CVE-2012-5592" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6052. Reason: This candidate is a reservation duplicate of CVE-2012-6052. Notes: All CVE users should reference CVE-2012-6052 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5592/">CVE-2012-5592</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5593</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5593" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5593" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5593" ref_url="https://www.suse.com/security/cve/CVE-2012-5593" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6053. Reason: This candidate is a reservation duplicate of CVE-2012-6053. Notes: All CVE users should reference CVE-2012-6053 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5593/">CVE-2012-5593</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5594</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5594" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5594" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5594" ref_url="https://www.suse.com/security/cve/CVE-2012-5594" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6054. Reason: This candidate is a reservation duplicate of CVE-2012-6054. Notes: All CVE users should reference CVE-2012-6054 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5594/">CVE-2012-5594</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5595</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5595" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5595" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5595" ref_url="https://www.suse.com/security/cve/CVE-2012-5595" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6056. Reason: This candidate is a reservation duplicate of CVE-2012-6056. Notes: All CVE users should reference CVE-2012-6056 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5595/">CVE-2012-5595</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5596</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5596" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5596" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5596" ref_url="https://www.suse.com/security/cve/CVE-2012-5596" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6057. Reason: This candidate is a reservation duplicate of CVE-2012-6057. Notes: All CVE users should reference CVE-2012-6057 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5596/">CVE-2012-5596</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5597</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5597" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5597" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5597" ref_url="https://www.suse.com/security/cve/CVE-2012-5597" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6059. Reason: This candidate is a reservation duplicate of CVE-2012-6059. Notes: All CVE users should reference CVE-2012-6059 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5597/">CVE-2012-5597</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5598</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5598" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5598" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5598" ref_url="https://www.suse.com/security/cve/CVE-2012-5598" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6060. Reason: This candidate is a reservation duplicate of CVE-2012-6060. Notes: All CVE users should reference CVE-2012-6060 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5598/">CVE-2012-5598</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5599</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5599" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5599" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5599" ref_url="https://www.suse.com/security/cve/CVE-2012-5599" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6061. Reason: This candidate is a reservation duplicate of CVE-2012-6061. Notes: All CVE users should reference CVE-2012-6061 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5599/">CVE-2012-5599</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5600</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5600" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5600" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5600" ref_url="https://www.suse.com/security/cve/CVE-2012-5600" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6062. Reason: This candidate is a reservation duplicate of CVE-2012-6062. Notes: All CVE users should reference CVE-2012-6062 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5600/">CVE-2012-5600</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5601</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5601" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5601" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5601" ref_url="https://www.suse.com/security/cve/CVE-2012-5601" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6055. Reason: This candidate is a reservation duplicate of CVE-2012-6055. Notes: All CVE users should reference CVE-2012-6055 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5601/">CVE-2012-5601</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5602</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5602" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5602" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5602" ref_url="https://www.suse.com/security/cve/CVE-2012-5602" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000338.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1633-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0151-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00042.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6058.  Reason: This candidate is a reservation duplicate of CVE-2012-6058.  Notes: All CVE users should reference CVE-2012-6058 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-5602/">CVE-2012-5602</cve>
	<bugzilla href="https://bugzilla.suse.com/792005">SUSE bug 792005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5615</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5615" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5615" ref_url="https://www.suse.com/security/cve/CVE-2012-5615" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0262-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0620-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0743-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" source="SUSE-SU"/>
    <description>
    Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5615/">CVE-2012-5615</cve>
	<bugzilla href="https://bugzilla.suse.com/792440">SUSE bug 792440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901237">SUSE bug 901237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915913">SUSE bug 915913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131129" comment="libmysqlclient18-32bit-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131128" comment="libmysqlclient18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131132" comment="mariadb-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131133" comment="mariadb-client-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131134" comment="mariadb-errormessages-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131946" comment="mariadb-tools-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131131" comment="libmysqlclient_r18-32bit-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131803" comment="libmysqlclient-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131130" comment="libmysqlclient_r18-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131804" comment="libmysqld-devel-10.0.27-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131805" comment="libmysqld18-10.0.27-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141993" comment="libmysqlclient18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141994" comment="libmysqlclient18-32bit-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141997" comment="mariadb-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141998" comment="mariadb-client-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141999" comment="mariadb-errormessages-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143361" comment="mariadb-tools-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141996" comment="libmysqlclient_r18-32bit-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145144" comment="libmysqlclient-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141995" comment="libmysqlclient_r18-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145145" comment="libmysqld-devel-10.0.21-1.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145146" comment="libmysqld18-10.0.21-1.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159168" comment="mariadb-tools-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159163" comment="libmysqlclient18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159164" comment="libmysqlclient18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159165" comment="mariadb-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159166" comment="mariadb-client-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159167" comment="mariadb-errormessages-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159651" comment="libmysqlclient_r18-32bit-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159818" comment="libmysqlclient-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159650" comment="libmysqlclient_r18-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159819" comment="libmysqld-devel-10.0.30-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159820" comment="libmysqld18-10.0.30-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512354" comment="libmysqlclient18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512355" comment="libmysqlclient18-32bit-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512573" comment="mariadb-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512358" comment="mariadb-100-errormessages-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512574" comment="mariadb-client-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512575" comment="mariadb-errormessages-10.2.18-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513558" comment="mariadb-tools-10.2.18-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512357" comment="libmysqlclient_r18-32bit-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513165" comment="libmysqlclient18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513166" comment="libmysqlclient18-32bit-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513324" comment="mariadb-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513167" comment="mariadb-100-errormessages-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513325" comment="mariadb-client-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513326" comment="mariadb-errormessages-10.2.25-3.19.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513327" comment="mariadb-tools-10.2.25-3.19.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513740" comment="libmysqlclient-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512356" comment="libmysqlclient_r18-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513741" comment="libmysqld-devel-10.0.35-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513742" comment="libmysqld18-10.0.35-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514078" comment="libmysqlclient-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514080" comment="libmysqld-devel-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514081" comment="libmysqld18-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514079" comment="libmysqlclient_r18-10.0.40.1-2.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514300" comment="libmysqlclient_r18-32bit-10.0.40.1-2.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514658" comment="libmysqlclient18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514659" comment="libmysqlclient18-32bit-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514660" comment="libmysqlclient_r18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514661" comment="libmysqlclient_r18-32bit-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514662" comment="mariadb-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514663" comment="mariadb-client-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514664" comment="mariadb-errormessages-10.0.16-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514660" comment="libmysqlclient_r18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514661" comment="libmysqlclient_r18-32bit-10.0.16-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009539542" comment="libmysqlclient-devel-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539543" comment="libmysqlclient_r18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539544" comment="libmysqld-devel-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539545" comment="libmysqld18-10.0.16-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009543495" comment="libmysqlclient18-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543496" comment="libmysqlclient18-32bit-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543497" comment="mariadb-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543498" comment="mariadb-client-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543499" comment="mariadb-errormessages-10.0.16-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543500" comment="mariadb-tools-10.0.16-15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5634</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5634" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5634" ref_url="https://www.suse.com/security/cve/CVE-2012-5634" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0912-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html" source="SUSE-SU"/>
    <description>
    Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5634/">CVE-2012-5634</cve>
	<bugzilla href="https://bugzilla.suse.com/794316">SUSE bug 794316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/800275">SUSE bug 800275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/840592">SUSE bug 840592</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5643</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5643" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5643" ref_url="https://www.suse.com/security/cve/CVE-2012-5643" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000350.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0327-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-February/000353.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:1996-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2016:2089-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0162-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0186-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1436-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1443-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00032.html" source="SUSE-SU"/>
    <description>
    Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5643/">CVE-2012-5643</cve>
	<bugzilla href="https://bugzilla.suse.com/794954">SUSE bug 794954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/796999">SUSE bug 796999</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009105076" comment="squid-3.3.13-4.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141127" comment="squid-3.5.21-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143296" comment="squid-3.3.13-1.8 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009146970" comment="squid-3.5.21-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175181" comment="squid-3.5.21-26.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513414" comment="squid-4.8-2.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5668</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5668" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5668" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5668" ref_url="https://www.suse.com/security/cve/CVE-2012-5668" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-January/000331.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0196-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-January/000332.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0177-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0189-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html" source="SUSE-SU"/>
    <description>
    FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5668/">CVE-2012-5668</cve>
	<bugzilla href="https://bugzilla.suse.com/795826">SUSE bug 795826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5669</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5669" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5669" ref_url="https://www.suse.com/security/cve/CVE-2012-5669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0195-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-January/000331.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0177-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0189-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html" source="SUSE-SU"/>
    <description>
    The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5669/">CVE-2012-5669</cve>
	<bugzilla href="https://bugzilla.suse.com/795826">SUSE bug 795826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5670</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5670" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5670" ref_url="https://www.suse.com/security/cve/CVE-2012-5670" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0165-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html" source="SUSE-SU"/>
    <description>
    The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5670/">CVE-2012-5670</cve>
	<bugzilla href="https://bugzilla.suse.com/795826">SUSE bug 795826</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144742" comment="freetype2-devel-2.5.3-2.18 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145023" comment="freetype2-devel-2.5.5-7.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145225" comment="freetype2-devel-2.6.3-7.8.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159758" comment="freetype2-devel-2.6.3-7.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171116" comment="freetype2-devel-2.6.3-7.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140588" comment="libfreetype6-32bit-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140589" comment="ft2demos-2.6.3-7.8.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140587" comment="libfreetype6-2.6.3-7.8.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141345" comment="ft2demos-2.5.3-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141519" comment="libfreetype6-2.5.3-2.18 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141861" comment="ft2demos-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141969" comment="libfreetype6-2.5.5-7.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141970" comment="libfreetype6-32bit-2.5.5-7.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143181" comment="ft2demos-2.5.3-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143231" comment="libfreetype6-2.5.3-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141520" comment="libfreetype6-32bit-2.5.3-2.18 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158992" comment="ft2demos-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159136" comment="libfreetype6-2.6.3-7.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159137" comment="libfreetype6-32bit-2.6.3-7.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009171102" comment="ft2demos-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171103" comment="libfreetype6-2.6.3-7.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009171104" comment="libfreetype6-32bit-2.6.3-7.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5676</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5676" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5676" ref_url="https://www.suse.com/security/cve/CVE-2012-5676" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00033.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5676/">CVE-2012-5676</cve>
	<bugzilla href="https://bugzilla.suse.com/794062">SUSE bug 794062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5677</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5677" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5677" ref_url="https://www.suse.com/security/cve/CVE-2012-5677" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00033.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5677/">CVE-2012-5677</cve>
	<bugzilla href="https://bugzilla.suse.com/794062">SUSE bug 794062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5678</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5678" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5678" ref_url="https://www.suse.com/security/cve/CVE-2012-5678" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1643-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0139-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0368-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00033.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5678/">CVE-2012-5678</cve>
	<bugzilla href="https://bugzilla.suse.com/794062">SUSE bug 794062</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5688</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5688" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5688" ref_url="https://www.suse.com/security/cve/CVE-2012-5688" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1649-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-12/msg00058.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0605-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0666-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00077.html" source="SUSE-SU"/>
    <description>
    ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5688/">CVE-2012-5688</cve>
	<bugzilla href="https://bugzilla.suse.com/792926">SUSE bug 792926</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335111" comment="bind-libs is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335110" comment="bind-libs-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333958" comment="bind is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335113" comment="bind-chrootenv is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335114" comment="bind-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335112" comment="bind-utils is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336737" comment="libbind9-161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336738" comment="libdns1110 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336739" comment="libirs161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336740" comment="libisc1107 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336744" comment="libisc1107-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336741" comment="libisccc161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336742" comment="libisccfg163 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336743" comment="liblwres161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336735" comment="python-bind is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336737" comment="libbind9-161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336738" comment="libdns1110 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336739" comment="libirs161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336740" comment="libisc1107 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336744" comment="libisc1107-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336741" comment="libisccc161 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336742" comment="libisccfg163 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336743" comment="liblwres161 is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5689</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5689" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5689" ref_url="https://www.suse.com/security/cve/CVE-2012-5689" source="SUSE CVE"/>
    <description>
    ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5689/">CVE-2012-5689</cve>
	<bugzilla href="https://bugzilla.suse.com/800822">SUSE bug 800822</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144721" comment="bind-devel-9.9.5P1-1.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145014" comment="bind-devel-9.9.6P1-30.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157743" comment="bind-devel-9.9.9P1-62.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333968" comment="bind is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513632" comment="bind-devel-9.11.2-1.24 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513917" comment="bind-devel-9.11.2-3.10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141227" comment="bind-libs-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141229" comment="bind-utils-9.9.5P1-1.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143137" comment="bind-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143138" comment="bind-chrootenv-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143139" comment="bind-doc-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143140" comment="bind-libs-9.9.5P1-1.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141228" comment="bind-libs-32bit-9.9.5P1-1.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143141" comment="bind-utils-9.9.5P1-1.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143326" comment="bind-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143327" comment="bind-chrootenv-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143328" comment="bind-doc-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141847" comment="bind-libs-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141848" comment="bind-libs-32bit-9.9.6P1-30.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141849" comment="bind-utils-9.9.6P1-30.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157661" comment="bind-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157721" comment="bind-chrootenv-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157722" comment="bind-doc-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157662" comment="bind-libs-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157663" comment="bind-libs-32bit-9.9.9P1-62.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157664" comment="bind-utils-9.9.9P1-62.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333968" comment="bind is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334894" comment="bind-chrootenv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334895" comment="bind-doc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334896" comment="bind-utils is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334906" comment="libbind9-161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334907" comment="libdns1110 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334908" comment="libirs161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334909" comment="libisc1107 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334913" comment="libisc1107-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334910" comment="libisccc161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334911" comment="libisccfg163 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334912" comment="liblwres161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334904" comment="python-bind is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334906" comment="libbind9-161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334907" comment="libdns1110 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334908" comment="libirs161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334909" comment="libisc1107 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334913" comment="libisc1107-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334910" comment="libisccc161 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334911" comment="libisccfg163 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334912" comment="liblwres161 is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512727" comment="bind-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512728" comment="bind-chrootenv-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512729" comment="bind-doc-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512730" comment="bind-utils-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512731" comment="libbind9-160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512732" comment="libdns169-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512733" comment="libirs160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512734" comment="libisc166-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512735" comment="libisc166-32bit-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512736" comment="libisccc160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512737" comment="libisccfg160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512738" comment="liblwres160-9.11.2-3.10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512739" comment="python-bind-9.11.2-3.10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513479" comment="bind-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513480" comment="bind-chrootenv-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513481" comment="bind-doc-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512039" comment="bind-utils-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512040" comment="libbind9-160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512041" comment="libdns169-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512042" comment="libirs160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512043" comment="libisc166-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512044" comment="libisc166-32bit-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512045" comment="libisccc160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512046" comment="libisccfg160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512047" comment="liblwres160-9.11.2-1.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512048" comment="python-bind-9.11.2-1.24 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5783</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5783" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5783" ref_url="https://www.suse.com/security/cve/CVE-2012-5783" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0610-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000408.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0354-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0622-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0623-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0638-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00053.html" source="SUSE-SU"/>
    <description>
    Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2012-5783/">CVE-2012-5783</cve>
	<bugzilla href="https://bugzilla.suse.com/1132354">SUSE bug 1132354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803332">SUSE bug 803332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803333">SUSE bug 803333</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140452" comment="apache-commons-httpclient-3.1-4.498 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147512" comment="apache-commons-httpclient-3.1-4.364 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5784</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5784" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5784" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5784" ref_url="https://www.suse.com/security/cve/CVE-2012-5784" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1373-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005514.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1373-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1382-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005517.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2019:1526-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2019-06/msg00022.html" source="SUSE-SU"/>
    <description>
    Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2012-5784/">CVE-2012-5784</cve>
	<bugzilla href="https://bugzilla.suse.com/1134598">SUSE bug 1134598</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334475" comment="axis is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512721" comment="axis-1.4-290.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009554046" comment="axis-1.4-290.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5829</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5829" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5829" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5829" ref_url="https://www.suse.com/security/cve/CVE-2012-5829" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5829/">CVE-2012-5829</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5830</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5830" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5830" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5830" ref_url="https://www.suse.com/security/cve/CVE-2012-5830" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-5830/">CVE-2012-5830</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5833</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5833" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5833" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5833" ref_url="https://www.suse.com/security/cve/CVE-2012-5833" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via function calls involving certain values of the level parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5833/">CVE-2012-5833</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5835</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5835" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5835" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5835" ref_url="https://www.suse.com/security/cve/CVE-2012-5835" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via crafted data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5835/">CVE-2012-5835</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5836</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5836" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5836" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5836" ref_url="https://www.suse.com/security/cve/CVE-2012-5836" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving the setting of Cascading Style Sheets (CSS) properties in conjunction with SVG text.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5836/">CVE-2012-5836</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5837</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5837" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5837" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5837" ref_url="https://www.suse.com/security/cve/CVE-2012-5837" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5837/">CVE-2012-5837</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5838</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5838" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5838" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5838" ref_url="https://www.suse.com/security/cve/CVE-2012-5838" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via large image dimensions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5838/">CVE-2012-5838</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5839</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5839" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5839" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5839" ref_url="https://www.suse.com/security/cve/CVE-2012-5839" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5839/">CVE-2012-5839</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5840</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5840" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5840" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5840" ref_url="https://www.suse.com/security/cve/CVE-2012-5840" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5840/">CVE-2012-5840</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5841</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5841" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5841" ref_url="https://www.suse.com/security/cve/CVE-2012-5841" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 implement cross-origin wrappers with a filtering behavior that does not properly restrict write actions, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5841/">CVE-2012-5841</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5842</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5842" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5842" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5842" ref_url="https://www.suse.com/security/cve/CVE-2012-5842" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5842/">CVE-2012-5842</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5843</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-5843" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5843" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-5843" ref_url="https://www.suse.com/security/cve/CVE-2012-5843" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2012:1592-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1583-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1584-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00091.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1585-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2012:1586-1" ref_url="https://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0175-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-5843/">CVE-2012-5843</cve>
	<bugzilla href="https://bugzilla.suse.com/790140">SUSE bug 790140</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6075</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6075" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6075" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6075" ref_url="https://www.suse.com/security/cve/CVE-2012-6075" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1404-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00007.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-6075/">CVE-2012-6075</cve>
	<bugzilla href="https://bugzilla.suse.com/797523">SUSE bug 797523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/800275">SUSE bug 800275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/840592">SUSE bug 840592</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6093</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6093" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6093" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6093" ref_url="https://www.suse.com/security/cve/CVE-2012-6093" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0204-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0211-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00089.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0256-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00014.html" source="SUSE-SU"/>
    <description>
    The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-6093/">CVE-2012-6093</cve>
	<bugzilla href="https://bugzilla.suse.com/797006">SUSE bug 797006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802634">SUSE bug 802634</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113422" comment="qt4-x11-tools-4.8.6-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113432" comment="libqt4-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113420" comment="libqt4-devel-doc-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113421" comment="libqt4-devel-doc-data-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113433" comment="libqt4-linguist-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113434" comment="libqt4-private-headers-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125285" comment="libqt4-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125286" comment="libqt4-devel-doc-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125287" comment="libqt4-devel-doc-data-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125288" comment="libqt4-linguist-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125289" comment="libqt4-private-headers-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141612" comment="libqt4-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141614" comment="libqt4-qt3support-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141616" comment="libqt4-sql-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141622" comment="libqt4-sql-sqlite-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141626" comment="libqt4-x11-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143250" comment="libqt4-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143251" comment="libqt4-qt3support-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143252" comment="libqt4-sql-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143253" comment="libqt4-sql-sqlite-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143254" comment="libqt4-x11-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143255" comment="qt4-x11-tools-4.8.6-2.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144917" comment="libqt4-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144918" comment="libqt4-devel-doc-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144919" comment="libqt4-devel-doc-data-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144920" comment="libqt4-linguist-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144921" comment="libqt4-private-headers-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513220" comment="qt4-x11-tools-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513819" comment="libqt4-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513820" comment="libqt4-devel-doc-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513821" comment="libqt4-devel-doc-data-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513822" comment="libqt4-linguist-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513823" comment="libqt4-private-headers-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6094</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6094" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6094" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6094" ref_url="https://www.suse.com/security/cve/CVE-2012-6094" source="SUSE CVE"/>
    <description>
    cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6094/">CVE-2012-6094</cve>
	<bugzilla href="https://bugzilla.suse.com/795624">SUSE bug 795624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857372">SUSE bug 857372</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110318" comment="cups-devel-1.7.5-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144726" comment="cups-devel-1.7.5-2.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110315" comment="cups-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110316" comment="cups-client-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110319" comment="cups-libs-1.7.5-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110320" comment="cups-libs-32bit-1.7.5-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140513" comment="cups-libs-32bit-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140510" comment="cups-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140511" comment="cups-client-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140512" comment="cups-libs-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141281" comment="cups-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141282" comment="cups-client-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141283" comment="cups-libs-1.7.5-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141284" comment="cups-libs-32bit-1.7.5-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145213" comment="cups-ddk-1.7.5-12.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145214" comment="cups-devel-1.7.5-12.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158952" comment="cups-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158953" comment="cups-client-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158954" comment="cups-libs-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158955" comment="cups-libs-32bit-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159746" comment="cups-ddk-1.7.5-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159747" comment="cups-devel-1.7.5-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512085" comment="cups-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512086" comment="cups-client-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512087" comment="cups-libs-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512088" comment="cups-libs-32bit-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512775" comment="cups-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512776" comment="cups-client-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512777" comment="cups-libs-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512778" comment="cups-libs-32bit-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513641" comment="cups-ddk-1.7.5-20.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513642" comment="cups-devel-1.7.5-20.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513929" comment="cups-ddk-1.7.5-20.23.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513930" comment="cups-devel-1.7.5-20.23.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6111</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6111" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6111" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6111" ref_url="https://www.suse.com/security/cve/CVE-2012-6111" source="SUSE CVE"/>
    <description>
    gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function
    </description>
<advisory from="security@suse.de">
	<issued date="2022-11-26"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2012-6111/">CVE-2012-6111</cve>
	<bugzilla href="https://bugzilla.suse.com/1160780">SUSE bug 1160780</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009655554" comment="gnome-keyring is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655555" comment="gnome-keyring-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655556" comment="gnome-keyring-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655557" comment="gnome-keyring-pam is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655558" comment="gnome-keyring-pam-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009655559" comment="libgck-modules-gnome-keyring is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6128</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6128" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6128" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6128" ref_url="https://www.suse.com/security/cve/CVE-2012-6128" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0979-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00115.html" source="SUSE-SU"/>
    <description>
    Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-6128/">CVE-2012-6128</cve>
	<bugzilla href="https://bugzilla.suse.com/803347">SUSE bug 803347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512579" comment="openconnect-7.08-1.27 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512580" comment="openconnect-lang-7.08-1.27 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6136</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6136" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6136" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6136" ref_url="https://www.suse.com/security/cve/CVE-2012-6136" source="SUSE CVE"/>
    <description>
    tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2012-6136/">CVE-2012-6136</cve>
	<bugzilla href="https://bugzilla.suse.com/1160900">SUSE bug 1160900</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338840" comment="tuned is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6150</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6150" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6150" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6150" ref_url="https://www.suse.com/security/cve/CVE-2012-6150" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0024-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000831.html" source="SUSE-SU"/>
		<reference ref_id="TID7014420" ref_url="https://www.suse.com/support/kb/doc/?id=7014420" source="SUSE-SU"/>
		<reference ref_id="TID7016875" ref_url="https://www.suse.com/support/kb/doc/?id=7016875" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1921-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00088.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0405-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1106-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:1107-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html" source="SUSE-SU"/>
    <description>
    The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging an administrator's pam_winbind configuration-file mistake.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6150/">CVE-2012-6150</cve>
	<bugzilla href="https://bugzilla.suse.com/844720">SUSE bug 844720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/853347">SUSE bug 853347</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6152</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6152" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6152" ref_url="https://www.suse.com/security/cve/CVE-2012-6152" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000828.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0239-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0326-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html" source="SUSE-SU"/>
    <description>
    The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application crash) via crafted byte sequences.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-6152/">CVE-2012-6152</cve>
	<bugzilla href="https://bugzilla.suse.com/861019">SUSE bug 861019</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6536</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6536" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6536" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6536" ref_url="https://www.suse.com/security/cve/CVE-2012-6536" source="SUSE CVE"/>
    <description>
    net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not verify that the actual Netlink message length is consistent with a certain header field, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability and providing a (1) new or (2) updated state.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6536/">CVE-2012-6536</cve>
	<bugzilla href="https://bugzilla.suse.com/809889">SUSE bug 809889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6537</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6537" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6537" ref_url="https://www.suse.com/security/cve/CVE-2012-6537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6537/">CVE-2012-6537</cve>
	<bugzilla href="https://bugzilla.suse.com/809889">SUSE bug 809889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6538</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6538" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6538" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6538" ref_url="https://www.suse.com/security/cve/CVE-2012-6538" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a string, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-13"/>
	<updated date="2023-05-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6538/">CVE-2012-6538</cve>
	<bugzilla href="https://bugzilla.suse.com/809889">SUSE bug 809889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6539</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6539" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6539" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6539" ref_url="https://www.suse.com/security/cve/CVE-2012-6539" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The dev_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6539/">CVE-2012-6539</cve>
	<bugzilla href="https://bugzilla.suse.com/809891">SUSE bug 809891</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6542</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6542" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6542" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6542" ref_url="https://www.suse.com/security/cve/CVE-2012-6542" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that leverages an uninitialized pointer argument.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6542/">CVE-2012-6542</cve>
	<bugzilla href="https://bugzilla.suse.com/809894">SUSE bug 809894</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6544</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6544" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6544" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6544" ref_url="https://www.suse.com/security/cve/CVE-2012-6544" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the (1) L2CAP or (2) HCI implementation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6544/">CVE-2012-6544</cve>
	<bugzilla href="https://bugzilla.suse.com/809898">SUSE bug 809898</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6545</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6545" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6545" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6545" ref_url="https://www.suse.com/security/cve/CVE-2012-6545" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6545/">CVE-2012-6545</cve>
	<bugzilla href="https://bugzilla.suse.com/809899">SUSE bug 809899</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6546</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6546" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6546" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6546" ref_url="https://www.suse.com/security/cve/CVE-2012-6546" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6546/">CVE-2012-6546</cve>
	<bugzilla href="https://bugzilla.suse.com/809900">SUSE bug 809900</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6547</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6547" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6547" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6547" ref_url="https://www.suse.com/security/cve/CVE-2012-6547" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6547/">CVE-2012-6547</cve>
	<bugzilla href="https://bugzilla.suse.com/809901">SUSE bug 809901</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6548</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6548" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6548" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6548" ref_url="https://www.suse.com/security/cve/CVE-2012-6548" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6548/">CVE-2012-6548</cve>
	<bugzilla href="https://bugzilla.suse.com/809902">SUSE bug 809902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6549</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6549" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6549" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6549" ref_url="https://www.suse.com/security/cve/CVE-2012-6549" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-6549/">CVE-2012-6549</cve>
	<bugzilla href="https://bugzilla.suse.com/809903">SUSE bug 809903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6647</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6647" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6647" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6647" ref_url="https://www.suse.com/security/cve/CVE-2012-6647" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-06/msg00022.html" source="SUSE-SU"/>
    <description>
    The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted FUTEX_WAIT_REQUEUE_PI command.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-6647/">CVE-2012-6647</cve>
	<bugzilla href="https://bugzilla.suse.com/878289">SUSE bug 878289</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6655</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6655" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6655" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6655" ref_url="https://www.suse.com/security/cve/CVE-2012-6655" source="SUSE CVE"/>
    <description>
    An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-20"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2012-6655/">CVE-2012-6655</cve>
	<bugzilla href="https://bugzilla.suse.com/892382">SUSE bug 892382</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009338841" comment="accountsservice is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341592" comment="accountsservice-lang is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341593" comment="libaccountsservice0 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009341594" comment="typelib-1_0-AccountsService-1_0 is affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6657</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6657" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6657" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6657" ref_url="https://www.suse.com/security/cve/CVE-2012-6657" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0652-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:0812-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html" source="SUSE-SU"/>
    <description>
    The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-6657/">CVE-2012-6657</cve>
	<bugzilla href="https://bugzilla.suse.com/896779">SUSE bug 896779</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6689</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6689" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6689" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6689" ref_url="https://www.suse.com/security/cve/CVE-2012-6689" source="SUSE CVE"/>
    <description>
    The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local users to have an unspecified impact by spoofing Netlink messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6689/">CVE-2012-6689</cve>
	<bugzilla href="https://bugzilla.suse.com/920170">SUSE bug 920170</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6701</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6701" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6701" ref_url="https://www.suse.com/security/cve/CVE-2012-6701" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2016:2144-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00046.html" source="SUSE-SU"/>
    <description>
    Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-18"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6701/">CVE-2012-6701</cve>
	<bugzilla href="https://bugzilla.suse.com/969354">SUSE bug 969354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/969355">SUSE bug 969355</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6702</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Containers 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6702" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6702" ref_url="https://www.suse.com/security/cve/CVE-2012-6702" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2019:695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:706-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:719-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:727-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2019:738-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0415-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002630.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-February/002631.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2699-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2700-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:2701-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:0483-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-02/msg00071.html" source="SUSE-SU"/>
    <description>
    Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2012-6702/">CVE-2012-6702</cve>
	<bugzilla href="https://bugzilla.suse.com/983215">SUSE bug 983215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983216">SUSE bug 983216</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148248" comment="libexpat-devel-2.1.0-20.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162539" comment="libexpat-devel-2.1.0-21.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334159" comment="expat is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009540559" comment="libexpat-devel-2.1.0-20.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009541103" comment="libexpat-devel-2.1.0-20.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792127" comment="libexpat-devel-2.1.0-20.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148243" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148244" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148245" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334159" comment="expat is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334802" comment="libexpat1 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334801" comment="libexpat1-32bit is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117868" comment="SUSE Linux Enterprise Module for Containers 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009384477" comment="sles12-docker-image-1.1.4-20171002 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009384478" comment="sles12sp1-docker-image-1.0.7-20171002 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009384485" comment="sles12sp2-docker-image-1.0.2-20180821 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512838" comment="expat-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512839" comment="libexpat1-2.1.0-21.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512840" comment="libexpat1-32bit-2.1.0-21.9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009517085" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009517086" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009517087" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009532668" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009532669" comment="libexpat1-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009547800" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009547801" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009547802" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009549936" comment="expat-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009549937" comment="libexpat1-2.1.0-20.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009547802" comment="libexpat1-32bit-2.1.0-20.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6703</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6703" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6703" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6703" ref_url="https://www.suse.com/security/cve/CVE-2012-6703" source="SUSE CVE"/>
    <description>
    Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.6-rc6-next-20120917 allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-18"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6703/">CVE-2012-6703</cve>
	<bugzilla href="https://bugzilla.suse.com/986811">SUSE bug 986811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986941">SUSE bug 986941</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6704</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6704" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6704" ref_url="https://www.suse.com/security/cve/CVE-2012-6704" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:0333-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00067.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0437-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:0494-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1102-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00031.html" source="SUSE-SU"/>
    <description>
    The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6704/">CVE-2012-6704</cve>
	<bugzilla href="https://bugzilla.suse.com/1013531">SUSE bug 1013531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013542">SUSE bug 1013542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115893">SUSE bug 1115893</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6706</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6706" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6706" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6706" ref_url="https://www.suse.com/security/cve/CVE-2012-6706" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2017:1716-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1745-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00049.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1760-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2017:1763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2017-July/003001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0809-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2018-April/003863.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0863-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2021:2834-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009355.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1658-1" ref_url="https://lists.opensuse.org/opensuse-updates/2017-06/msg00085.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2017:1797-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2018:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00062.html" source="SUSE-SU"/>
    <description>
    A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the "DestPos" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6706/">CVE-2012-6706</cve>
	<bugzilla href="https://bugzilla.suse.com/1045315">SUSE bug 1045315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045490">SUSE bug 1045490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053919">SUSE bug 1053919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083915">SUSE bug 1083915</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631579" comment="unrar-5.6.1-4.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631584" comment="unrar-5.6.1-4.5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157776" comment="libunrar-devel-5.0.14-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157777" comment="libunrar5_0_14-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512064" comment="clamav-0.100.2-33.18.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157766" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512760" comment="clamav-0.101.3-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157766" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512760" comment="clamav-0.101.3-1.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631584" comment="unrar-5.6.1-4.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009517667" comment="clamav-0.99.2-32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009517671" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009519046" comment="clamav-0.99.4-33.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157766" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009519046" comment="clamav-0.99.4-33.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009517671" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009533258" comment="clamav-0.99.4-33.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009532224" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009534634" comment="clamav-0.99.2-32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009534640" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009540848" comment="libunrar-devel-5.0.14-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009540849" comment="libunrar5_0_14-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009544926" comment="clamav-0.99.2-32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009544938" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009550823" comment="clamav-0.99.4-33.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157766" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009550823" comment="clamav-0.99.4-33.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009549409" comment="unrar-5.0.14-3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009550823" comment="clamav-0.99.4-33.9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631576" comment="unrar-5.6.1-4.5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631576" comment="unrar-5.6.1-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333933" comment="clamav is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631579" comment="unrar-5.6.1-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333933" comment="clamav is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631584" comment="unrar-5.6.1-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333933" comment="clamav is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009631839" comment="unrar-5.6.1-4.5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333933" comment="clamav is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009792128" comment="libunrar-devel-5.0.14-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792129" comment="libunrar5_0_14-5.0.14-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009631578" comment="libunrar5_6_1-5.6.1-4.5.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6708</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6708" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6708" ref_url="https://www.suse.com/security/cve/CVE-2012-6708" source="SUSE CVE"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html" source="SUSE-SU"/>
    <description>
    jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '&lt;' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '&lt;' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-09-22"/>
	<updated date="2022-11-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2012-6708/">CVE-2012-6708</cve>
	<bugzilla href="https://bugzilla.suse.com/1111661">SUSE bug 1111661</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334050" comment="ruby is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6711</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6711" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6711" ref_url="https://www.suse.com/security/cve/CVE-2012-6711" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:2976-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006142.html" source="SUSE-SU"/>
    <description>
    A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-26"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6711/">CVE-2012-6711</cve>
	<bugzilla href="https://bugzilla.suse.com/1138676">SUSE bug 1138676</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337715" comment="bash-lang is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334330" comment="bash is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337667" comment="bash-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337713" comment="libreadline6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337714" comment="libreadline6-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337669" comment="readline-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334330" comment="bash is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337667" comment="bash-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337715" comment="bash-lang is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337713" comment="libreadline6 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337714" comment="libreadline6-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337669" comment="readline-doc is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009536195" comment="bash-4.2-83.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009536196" comment="bash-doc-4.2-83.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009536197" comment="libreadline6-6.2-83.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009536198" comment="libreadline6-32bit-6.2-83.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009536199" comment="readline-doc-6.2-83.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009548833" comment="bash-4.2-83.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009536196" comment="bash-doc-4.2-83.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009548834" comment="libreadline6-6.2-83.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009548835" comment="libreadline6-32bit-6.2-83.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009536199" comment="readline-doc-6.2-83.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009659638" comment="bash-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009337673" comment="readline-devel is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6712</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2012-6712" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6712" source="CVE"/>
    <reference ref_id="SUSE CVE-2012-6712" ref_url="https://www.suse.com/security/cve/CVE-2012-6712" source="SUSE CVE"/>
    <description>
    In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-26"/>
	<severity>Critical</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2012-6712/">CVE-2012-6712</cve>
	<bugzilla href="https://bugzilla.suse.com/1143176">SUSE bug 1143176</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0151</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0151" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0151" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0151" ref_url="https://www.suse.com/security/cve/CVE-2013-0151" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1404-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00007.html" source="SUSE-SU"/>
    <description>
    The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging administrative access to an HVM guest in a domain with a large number of VCPUs.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0151/">CVE-2013-0151</cve>
	<bugzilla href="https://bugzilla.suse.com/797285">SUSE bug 797285</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0152</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0152" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0152" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0152" ref_url="https://www.suse.com/security/cve/CVE-2013-0152" source="SUSE CVE"/>
    <description>
    Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0152/">CVE-2013-0152</cve>
	<bugzilla href="https://bugzilla.suse.com/797287">SUSE bug 797287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/800798">SUSE bug 800798</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0153</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0153" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0153" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0153" ref_url="https://www.suse.com/security/cve/CVE-2013-0153" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000404.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0637-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0912-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html" source="SUSE-SU"/>
    <description>
    The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0153/">CVE-2013-0153</cve>
	<bugzilla href="https://bugzilla.suse.com/800275">SUSE bug 800275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/800802">SUSE bug 800802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/840592">SUSE bug 840592</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0157</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0157" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0157" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0157" ref_url="https://www.suse.com/security/cve/CVE-2013-0157" source="SUSE CVE"/>
    <description>
    (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0157/">CVE-2013-0157</cve>
	<bugzilla href="https://bugzilla.suse.com/797002">SUSE bug 797002</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141448" comment="libuuid-devel-2.25-6.69 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141909" comment="libuuid-devel-2.25-30.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142130" comment="libuuid-devel-2.28-40.28 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159649" comment="libuuid-devel-2.29.2-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512250" comment="libuuid-devel-2.29.2-7.14 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514052" comment="libuuid-devel-2.33.2-2.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140779" comment="libblkid1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140780" comment="libblkid1-32bit-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140781" comment="libfdisk1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140782" comment="libmount1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140783" comment="libmount1-32bit-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140784" comment="libsmartcols1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140785" comment="libuuid1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140786" comment="libuuid1-32bit-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140787" comment="python-libmount-2.28-40.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140788" comment="util-linux-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140789" comment="util-linux-lang-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140790" comment="util-linux-systemd-2.28-40.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140791" comment="uuidd-2.28-40.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140779" comment="libblkid1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140780" comment="libblkid1-32bit-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140781" comment="libfdisk1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140782" comment="libmount1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140783" comment="libmount1-32bit-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140784" comment="libsmartcols1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142130" comment="libuuid-devel-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140785" comment="libuuid1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140786" comment="libuuid1-32bit-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140787" comment="python-libmount-2.28-40.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140788" comment="util-linux-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140789" comment="util-linux-lang-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140790" comment="util-linux-systemd-2.28-40.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140791" comment="uuidd-2.28-40.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140779" comment="libblkid1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140781" comment="libfdisk1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140782" comment="libmount1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140784" comment="libsmartcols1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140785" comment="libuuid1-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140787" comment="python-libmount-2.28-40.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140788" comment="util-linux-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140789" comment="util-linux-lang-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140790" comment="util-linux-systemd-2.28-40.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140791" comment="uuidd-2.28-40.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141443" comment="libblkid1-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141444" comment="libblkid1-32bit-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141445" comment="libmount1-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141446" comment="libmount1-32bit-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141447" comment="libsmartcols1-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141448" comment="libuuid-devel-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141449" comment="libuuid1-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141450" comment="libuuid1-32bit-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141451" comment="python-libmount-2.25-6.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141452" comment="util-linux-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141453" comment="util-linux-lang-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141454" comment="util-linux-systemd-2.25-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141455" comment="uuidd-2.25-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141443" comment="libblkid1-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141444" comment="libblkid1-32bit-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141445" comment="libmount1-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141446" comment="libmount1-32bit-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141447" comment="libsmartcols1-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141449" comment="libuuid1-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141450" comment="libuuid1-32bit-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141451" comment="python-libmount-2.25-6.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141452" comment="util-linux-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141453" comment="util-linux-lang-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141454" comment="util-linux-systemd-2.25-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141455" comment="uuidd-2.25-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141904" comment="libblkid1-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141905" comment="libblkid1-32bit-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141906" comment="libmount1-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141907" comment="libmount1-32bit-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141908" comment="libsmartcols1-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141909" comment="libuuid-devel-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141910" comment="libuuid1-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141911" comment="libuuid1-32bit-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141912" comment="python-libmount-2.25-30.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141913" comment="util-linux-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141914" comment="util-linux-lang-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141915" comment="util-linux-systemd-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141916" comment="uuidd-2.25-30.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141904" comment="libblkid1-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141905" comment="libblkid1-32bit-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141906" comment="libmount1-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141907" comment="libmount1-32bit-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141908" comment="libsmartcols1-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141910" comment="libuuid1-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141911" comment="libuuid1-32bit-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141912" comment="python-libmount-2.25-30.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141913" comment="util-linux-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141914" comment="util-linux-lang-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141915" comment="util-linux-systemd-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141916" comment="uuidd-2.25-30.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144812" comment="libblkid-devel-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144813" comment="libmount-devel-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144814" comment="libsmartcols-devel-2.25-6.69 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141448" comment="libuuid-devel-2.25-6.69 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145086" comment="libblkid-devel-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145087" comment="libmount-devel-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145088" comment="libsmartcols-devel-2.25-30.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141909" comment="libuuid-devel-2.25-30.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145285" comment="libblkid-devel-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145286" comment="libmount-devel-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145287" comment="libsmartcols-devel-2.28-40.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142130" comment="libuuid-devel-2.28-40.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159070" comment="libblkid1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159071" comment="libblkid1-32bit-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159072" comment="libfdisk1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159073" comment="libmount1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159074" comment="libmount1-32bit-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159075" comment="libsmartcols1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159076" comment="libuuid1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159077" comment="libuuid1-32bit-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159078" comment="python-libmount-2.29.2-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159079" comment="util-linux-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159080" comment="util-linux-lang-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159081" comment="util-linux-systemd-2.29.2-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159082" comment="uuidd-2.29.2-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159070" comment="libblkid1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159071" comment="libblkid1-32bit-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159072" comment="libfdisk1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159073" comment="libmount1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159074" comment="libmount1-32bit-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159075" comment="libsmartcols1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159649" comment="libuuid-devel-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159076" comment="libuuid1-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159077" comment="libuuid1-32bit-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159078" comment="python-libmount-2.29.2-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159079" comment="util-linux-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159080" comment="util-linux-lang-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159081" comment="util-linux-systemd-2.29.2-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159082" comment="uuidd-2.29.2-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159799" comment="libblkid-devel-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159800" comment="libmount-devel-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159801" comment="libsmartcols-devel-2.29.2-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159649" comment="libuuid-devel-2.29.2-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512244" comment="libblkid1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512245" comment="libblkid1-32bit-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512246" comment="libfdisk1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512247" comment="libmount1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512248" comment="libmount1-32bit-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512249" comment="libsmartcols1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512250" comment="libuuid-devel-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512251" comment="libuuid1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512252" comment="libuuid1-32bit-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512253" comment="python-libmount-2.29.2-7.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512254" comment="util-linux-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512255" comment="util-linux-lang-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512256" comment="util-linux-systemd-2.29.2-7.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512257" comment="uuidd-2.29.2-7.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512244" comment="libblkid1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512245" comment="libblkid1-32bit-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512246" comment="libfdisk1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512247" comment="libmount1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512248" comment="libmount1-32bit-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512249" comment="libsmartcols1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512251" comment="libuuid1-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512252" comment="libuuid1-32bit-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512253" comment="python-libmount-2.29.2-7.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512254" comment="util-linux-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512255" comment="util-linux-lang-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512256" comment="util-linux-systemd-2.29.2-7.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512257" comment="uuidd-2.29.2-7.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513024" comment="libblkid1-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513025" comment="libblkid1-32bit-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513026" comment="libfdisk1-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513027" comment="libmount1-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513028" comment="libmount1-32bit-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513029" comment="libsmartcols1-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513030" comment="libuuid1-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513031" comment="libuuid1-32bit-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513032" comment="python-libmount-2.33.2-2.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513033" comment="util-linux-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513034" comment="util-linux-lang-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513035" comment="util-linux-systemd-2.33.2-2.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513036" comment="uuidd-2.33.2-2.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513715" comment="libblkid-devel-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513716" comment="libmount-devel-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513717" comment="libsmartcols-devel-2.29.2-7.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512250" comment="libuuid-devel-2.29.2-7.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514049" comment="libblkid-devel-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514050" comment="libmount-devel-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514051" comment="libsmartcols-devel-2.33.2-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514052" comment="libuuid-devel-2.33.2-2.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0160</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0160" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0160" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0160" ref_url="https://www.suse.com/security/cve/CVE-2013-0160" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1022-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0160/">CVE-2013-0160</cve>
	<bugzilla href="https://bugzilla.suse.com/797175">SUSE bug 797175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0166</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0166" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0166" ref_url="https://www.suse.com/security/cve/CVE-2013-0166" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0549-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0549-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-06-01"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0166/">CVE-2013-0166</cve>
	<bugzilla href="https://bugzilla.suse.com/802648">SUSE bug 802648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802746">SUSE bug 802746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/813366">SUSE bug 813366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821818">SUSE bug 821818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/833408">SUSE bug 833408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854391">SUSE bug 854391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0169</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0169" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0169" ref_url="https://www.suse.com/security/cve/CVE-2013-0169" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000399.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0549-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000424.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0549-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000428.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000400.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001093.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1557-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-December/001094.html" source="SUSE-SU"/>
		<reference ref_id="TID7017793" ref_url="https://www.suse.com/support/kb/doc/?id=7017793" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0336-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00070.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0339-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00072.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2016:0640-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" source="SUSE-SU"/>
    <description>
    The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-20"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0169/">CVE-2013-0169</cve>
	<bugzilla href="https://bugzilla.suse.com/1070148">SUSE bug 1070148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103036">SUSE bug 1103036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103597">SUSE bug 1103597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802184">SUSE bug 802184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802648">SUSE bug 802648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802746">SUSE bug 802746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804654">SUSE bug 804654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809839">SUSE bug 809839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/813366">SUSE bug 813366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/813939">SUSE bug 813939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/821818">SUSE bug 821818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/905106">SUSE bug 905106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977584">SUSE bug 977584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/977616">SUSE bug 977616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984977">SUSE bug 984977</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144892" comment="libopenssl-devel-1.0.1i-2.12 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145147" comment="libopenssl-devel-1.0.1i-34.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143362" comment="libopenssl1_0_0-hmac-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143363" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143364" comment="openssl-doc-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142000" comment="libopenssl0_9_8-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142001" comment="libopenssl0_9_8-32bit-0.9.8j-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142002" comment="libopenssl1_0_0-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142003" comment="libopenssl1_0_0-32bit-1.0.1i-34.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142004" comment="openssl-1.0.1i-34.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131148" comment="libopenssl0_9_8-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131149" comment="libopenssl0_9_8-32bit-0.9.8j-102.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140892" comment="libopenssl1_0_0-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140894" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140890" comment="libopenssl-devel-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140891" comment="libopenssl1_0_0-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140893" comment="libopenssl1_0_0-hmac-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140895" comment="openssl-1.0.2j-55.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140896" comment="openssl-doc-1.0.2j-55.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141574" comment="libopenssl1_0_0-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141576" comment="openssl-1.0.1i-2.12 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143237" comment="libopenssl1_0_0-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141575" comment="libopenssl1_0_0-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143238" comment="libopenssl1_0_0-hmac-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143239" comment="libopenssl1_0_0-hmac-32bit-1.0.1i-2.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143240" comment="openssl-1.0.1i-2.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143241" comment="openssl-doc-1.0.1i-2.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141572" comment="libopenssl0_9_8-0.9.8j-59.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141573" comment="libopenssl0_9_8-32bit-0.9.8j-59.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149123" comment="libopenssl0_9_8-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009149124" comment="libopenssl0_9_8-32bit-0.9.8j-105.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148318" comment="libopenssl-devel-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148319" comment="libopenssl1_0_0-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148320" comment="libopenssl1_0_0-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148322" comment="libopenssl1_0_0-hmac-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148324" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148321" comment="openssl-1.0.2j-59.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009148323" comment="openssl-doc-1.0.2j-59.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512368" comment="libopenssl0_9_8-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512369" comment="libopenssl0_9_8-32bit-0.9.8j-106.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512363" comment="libopenssl1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512364" comment="libopenssl1_0_0-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513543" comment="libopenssl1_0_0-hmac-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513544" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512370" comment="libopenssl1_1-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512371" comment="libopenssl1_1-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512365" comment="openssl-1_0_0-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513545" comment="openssl-1_0_0-doc-1.0.2p-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512362" comment="libopenssl-1_0_0-devel-1.0.2p-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513752" comment="libopenssl-1_1-devel-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513753" comment="libopenssl-1_1-devel-32bit-1.1.1-1.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513189" comment="libopenssl1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513190" comment="libopenssl1_0_0-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513191" comment="libopenssl1_0_0-hmac-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513192" comment="libopenssl1_0_0-hmac-32bit-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513195" comment="libopenssl1_1-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513196" comment="libopenssl1_1-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512367" comment="openssl-1.0.2p-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513193" comment="openssl-1_0_0-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513194" comment="openssl-1_0_0-doc-1.0.2p-3.11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513188" comment="libopenssl-1_0_0-devel-1.0.2p-3.11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514093" comment="libopenssl-1_1-devel-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514094" comment="libopenssl-1_1-devel-32bit-1.1.1c-2.17.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512366" comment="libopenssl-devel-1.0.2p-1.13 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0170</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0170" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0170" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0170" ref_url="https://www.suse.com/security/cve/CVE-2013-0170" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0320-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0274-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0275-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0170/">CVE-2013-0170</cve>
	<bugzilla href="https://bugzilla.suse.com/800976">SUSE bug 800976</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144947" comment="libvirt-devel-1.2.5-13.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145170" comment="libvirt-devel-1.2.18.1-4.22 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145337" comment="libvirt-devel-2.0.0-26.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159830" comment="libvirt-devel-3.3.0-4.28 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513838" comment="libvirt-devel-4.0.0-6.13 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514203" comment="libvirt-devel-5.1.0-11.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140995" comment="libvirt-lock-sanlock-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140996" comment="libvirt-nss-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140977" comment="libvirt-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140978" comment="libvirt-client-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142146" comment="libvirt-client-32bit-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140979" comment="libvirt-daemon-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140980" comment="libvirt-daemon-config-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140981" comment="libvirt-daemon-config-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140982" comment="libvirt-daemon-driver-interface-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140983" comment="libvirt-daemon-driver-libxl-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140984" comment="libvirt-daemon-driver-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140985" comment="libvirt-daemon-driver-network-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140986" comment="libvirt-daemon-driver-nodedev-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140987" comment="libvirt-daemon-driver-nwfilter-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140988" comment="libvirt-daemon-driver-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140989" comment="libvirt-daemon-driver-secret-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140990" comment="libvirt-daemon-driver-storage-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140991" comment="libvirt-daemon-lxc-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140992" comment="libvirt-daemon-qemu-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140993" comment="libvirt-daemon-xen-2.0.0-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140994" comment="libvirt-doc-2.0.0-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141707" comment="libvirt-client-32bit-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141705" comment="libvirt-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141706" comment="libvirt-client-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141708" comment="libvirt-daemon-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141709" comment="libvirt-daemon-config-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141710" comment="libvirt-daemon-config-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141711" comment="libvirt-daemon-driver-interface-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141712" comment="libvirt-daemon-driver-libxl-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141713" comment="libvirt-daemon-driver-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141714" comment="libvirt-daemon-driver-network-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141715" comment="libvirt-daemon-driver-nodedev-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141716" comment="libvirt-daemon-driver-nwfilter-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141717" comment="libvirt-daemon-driver-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141718" comment="libvirt-daemon-driver-secret-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141719" comment="libvirt-daemon-driver-storage-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141720" comment="libvirt-daemon-lxc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141721" comment="libvirt-daemon-qemu-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141722" comment="libvirt-daemon-xen-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141723" comment="libvirt-doc-1.2.5-13.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143259" comment="libvirt-lock-sanlock-1.2.5-13.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142020" comment="libvirt-client-32bit-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142018" comment="libvirt-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142019" comment="libvirt-client-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142021" comment="libvirt-daemon-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142022" comment="libvirt-daemon-config-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142023" comment="libvirt-daemon-config-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142024" comment="libvirt-daemon-driver-interface-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142025" comment="libvirt-daemon-driver-libxl-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142026" comment="libvirt-daemon-driver-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142027" comment="libvirt-daemon-driver-network-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142028" comment="libvirt-daemon-driver-nodedev-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142029" comment="libvirt-daemon-driver-nwfilter-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142030" comment="libvirt-daemon-driver-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142031" comment="libvirt-daemon-driver-secret-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142032" comment="libvirt-daemon-driver-storage-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142033" comment="libvirt-daemon-lxc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142034" comment="libvirt-daemon-qemu-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142035" comment="libvirt-daemon-xen-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142036" comment="libvirt-doc-1.2.18.1-4.22 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143366" comment="libvirt-lock-sanlock-1.2.18.1-4.22 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159245" comment="libvirt-lock-sanlock-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159246" comment="libvirt-nss-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159218" comment="libvirt-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159219" comment="libvirt-admin-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159220" comment="libvirt-client-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159221" comment="libvirt-daemon-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159222" comment="libvirt-daemon-config-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159223" comment="libvirt-daemon-config-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159224" comment="libvirt-daemon-driver-interface-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159225" comment="libvirt-daemon-driver-libxl-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159226" comment="libvirt-daemon-driver-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159227" comment="libvirt-daemon-driver-network-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159228" comment="libvirt-daemon-driver-nodedev-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159229" comment="libvirt-daemon-driver-nwfilter-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159230" comment="libvirt-daemon-driver-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159231" comment="libvirt-daemon-driver-secret-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159232" comment="libvirt-daemon-driver-storage-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159233" comment="libvirt-daemon-driver-storage-core-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159234" comment="libvirt-daemon-driver-storage-disk-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159235" comment="libvirt-daemon-driver-storage-iscsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159236" comment="libvirt-daemon-driver-storage-logical-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159237" comment="libvirt-daemon-driver-storage-mpath-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159238" comment="libvirt-daemon-driver-storage-rbd-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159239" comment="libvirt-daemon-driver-storage-scsi-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159240" comment="libvirt-daemon-lxc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159241" comment="libvirt-daemon-qemu-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159242" comment="libvirt-daemon-xen-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159243" comment="libvirt-doc-3.3.0-4.28 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159244" comment="libvirt-libs-3.3.0-4.28 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512500" comment="libvirt-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512501" comment="libvirt-admin-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512502" comment="libvirt-client-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512503" comment="libvirt-daemon-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512504" comment="libvirt-daemon-config-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512505" comment="libvirt-daemon-config-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512506" comment="libvirt-daemon-driver-interface-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512507" comment="libvirt-daemon-driver-libxl-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512508" comment="libvirt-daemon-driver-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512509" comment="libvirt-daemon-driver-network-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512510" comment="libvirt-daemon-driver-nodedev-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512511" comment="libvirt-daemon-driver-nwfilter-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512512" comment="libvirt-daemon-driver-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512513" comment="libvirt-daemon-driver-secret-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512514" comment="libvirt-daemon-driver-storage-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512515" comment="libvirt-daemon-driver-storage-core-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512516" comment="libvirt-daemon-driver-storage-disk-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512517" comment="libvirt-daemon-driver-storage-iscsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512518" comment="libvirt-daemon-driver-storage-logical-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512519" comment="libvirt-daemon-driver-storage-mpath-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512520" comment="libvirt-daemon-driver-storage-rbd-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512521" comment="libvirt-daemon-driver-storage-scsi-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513554" comment="libvirt-daemon-hooks-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512522" comment="libvirt-daemon-lxc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512523" comment="libvirt-daemon-qemu-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512524" comment="libvirt-daemon-xen-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512525" comment="libvirt-doc-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512526" comment="libvirt-libs-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513555" comment="libvirt-lock-sanlock-4.0.0-6.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513556" comment="libvirt-nss-4.0.0-6.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513265" comment="libvirt-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513266" comment="libvirt-admin-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513267" comment="libvirt-client-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513268" comment="libvirt-daemon-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513269" comment="libvirt-daemon-config-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513270" comment="libvirt-daemon-config-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513271" comment="libvirt-daemon-driver-interface-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513272" comment="libvirt-daemon-driver-libxl-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513273" comment="libvirt-daemon-driver-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513274" comment="libvirt-daemon-driver-network-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513275" comment="libvirt-daemon-driver-nodedev-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513276" comment="libvirt-daemon-driver-nwfilter-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513277" comment="libvirt-daemon-driver-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513278" comment="libvirt-daemon-driver-secret-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513279" comment="libvirt-daemon-driver-storage-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513280" comment="libvirt-daemon-driver-storage-core-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513281" comment="libvirt-daemon-driver-storage-disk-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513282" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513283" comment="libvirt-daemon-driver-storage-logical-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513284" comment="libvirt-daemon-driver-storage-mpath-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513285" comment="libvirt-daemon-driver-storage-rbd-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513286" comment="libvirt-daemon-driver-storage-scsi-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513287" comment="libvirt-daemon-hooks-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513288" comment="libvirt-daemon-lxc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513289" comment="libvirt-daemon-qemu-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513290" comment="libvirt-daemon-xen-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513291" comment="libvirt-doc-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513292" comment="libvirt-libs-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513293" comment="libvirt-lock-sanlock-5.1.0-11.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513294" comment="libvirt-nss-5.1.0-11.10 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0172</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0172" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0172" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0172" ref_url="https://www.suse.com/security/cve/CVE-2013-0172" source="SUSE CVE"/>
    <description>
    Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging (1) objectClass access by a user, (2) objectClass access by a group, or (3) write access to an attribute.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0172/">CVE-2013-0172</cve>
	<bugzilla href="https://bugzilla.suse.com/798364">SUSE bug 798364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0176</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0176" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0176" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0176" ref_url="https://www.suse.com/security/cve/CVE-2013-0176" source="SUSE CVE"/>
    <description>
    The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0176/">CVE-2013-0176</cve>
	<bugzilla href="https://bugzilla.suse.com/802631">SUSE bug 802631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928323">SUSE bug 928323</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114957" comment="libssh4-0.6.3-8.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123868" comment="libssh4-0.6.3-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141697" comment="libssh4-0.6.3-1.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114955" comment="libssh-devel-0.6.3-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114956" comment="libssh-devel-doc-0.6.3-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114957" comment="libssh4-0.6.3-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009123873" comment="libssh-devel-0.6.3-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123874" comment="libssh-devel-doc-0.6.3-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009123868" comment="libssh4-0.6.3-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144933" comment="libssh-devel-0.6.3-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144934" comment="libssh-devel-doc-0.6.3-1.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141697" comment="libssh4-0.6.3-1.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512484" comment="libssh4-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512485" comment="libssh4-32bit-0.6.3-12.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513235" comment="libssh4-0.8.7-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513236" comment="libssh4-32bit-0.8.7-1.31 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513831" comment="libssh-devel-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513832" comment="libssh-devel-doc-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512484" comment="libssh4-0.6.3-12.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514184" comment="libssh-devel-0.8.7-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513832" comment="libssh-devel-doc-0.6.3-12.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513235" comment="libssh4-0.8.7-1.31 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0179</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0179" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0179" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0179" ref_url="https://www.suse.com/security/cve/CVE-2013-0179" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2018:0778-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00052.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2018:0807-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2018-03/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0867-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0951-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-07/msg00041.html" source="SUSE-SU"/>
    <description>
    The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0179/">CVE-2013-0179</cve>
	<bugzilla href="https://bugzilla.suse.com/798458">SUSE bug 798458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159251" comment="memcached-1.4.33-3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009174459" comment="memcached-1.4.39-4.6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334534" comment="memcached is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513855" comment="memcached-devel-1.4.39-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0211</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0211" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0211" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0211" ref_url="https://www.suse.com/security/cve/CVE-2013-0211" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001328.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0568-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-09-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0211/">CVE-2013-0211</cve>
	<bugzilla href="https://bugzilla.suse.com/800024">SUSE bug 800024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/979005">SUSE bug 979005</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108422" comment="libarchive-devel-3.1.2-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009108423" comment="libarchive13-3.1.2-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130724" comment="libarchive13-3.1.2-22.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130725" comment="libarchive-devel-3.1.2-22.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135964" comment="libarchive13-3.1.2-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135984" comment="libarchive-devel-3.1.2-25.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335286" comment="libarchive13 is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513020" comment="libarchive13-3.1.2-26.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514629" comment="libarchive13-3.1.2-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539523" comment="libarchive-devel-3.1.2-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543477" comment="libarchive13-3.1.2-9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009792130" comment="libarchive-devel-3.1.2-9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0213</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0213" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0213" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0213" ref_url="https://www.suse.com/security/cve/CVE-2013-0213" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000831.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0277-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0281-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html" source="SUSE-SU"/>
    <description>
    The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0213/">CVE-2013-0213</cve>
	<bugzilla href="https://bugzilla.suse.com/799641">SUSE bug 799641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/800982">SUSE bug 800982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880220">SUSE bug 880220</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0214</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0214" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0214" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0214" ref_url="https://www.suse.com/security/cve/CVE-2013-0214" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0325-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0326-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0519-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-May/000831.html" source="SUSE-SU"/>
		<reference ref_id="TID7010867" ref_url="https://www.suse.com/support/kb/doc/?id=7010867" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0277-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0281-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html" source="SUSE-SU"/>
    <description>
    Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that perform SWAT actions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0214/">CVE-2013-0214</cve>
	<bugzilla href="https://bugzilla.suse.com/799641">SUSE bug 799641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/880220">SUSE bug 880220</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0216</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0216" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0216" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0216" ref_url="https://www.suse.com/security/cve/CVE-2013-0216" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (loop) by triggering ring pointer corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0216/">CVE-2013-0216</cve>
	<bugzilla href="https://bugzilla.suse.com/800280">SUSE bug 800280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/800801">SUSE bug 800801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801178">SUSE bug 801178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0217</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0217" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0217" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0217" ref_url="https://www.suse.com/security/cve/CVE-2013-0217" source="SUSE CVE"/>
    <description>
    Memory leak in drivers/net/xen-netback/netback.c in the Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (memory consumption) by triggering certain error conditions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0217/">CVE-2013-0217</cve>
	<bugzilla href="https://bugzilla.suse.com/800280">SUSE bug 800280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/800801">SUSE bug 800801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801178">SUSE bug 801178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0219</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0219" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0219" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0219" ref_url="https://www.suse.com/security/cve/CVE-2013-0219" source="SUSE CVE"/>
    <description>
    System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0219/">CVE-2013-0219</cve>
	<bugzilla href="https://bugzilla.suse.com/801036">SUSE bug 801036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140853" comment="sssd-32bit-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141537" comment="libipa_hbac0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141538" comment="libsss_idmap0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141539" comment="python-sssd-config-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141540" comment="sssd-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141541" comment="sssd-32bit-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141542" comment="sssd-ad-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141543" comment="sssd-ipa-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141544" comment="sssd-krb5-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141545" comment="sssd-krb5-common-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141546" comment="sssd-ldap-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141547" comment="sssd-proxy-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141548" comment="sssd-tools-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141980" comment="libipa_hbac0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141981" comment="libsss_idmap0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141982" comment="libsss_sudo-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141983" comment="python-sssd-config-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141984" comment="sssd-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141985" comment="sssd-32bit-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141986" comment="sssd-ad-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141987" comment="sssd-ipa-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141988" comment="sssd-krb5-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141989" comment="sssd-krb5-common-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141990" comment="sssd-ldap-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141991" comment="sssd-proxy-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141992" comment="sssd-tools-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144872" comment="libipa_hbac-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144873" comment="libsss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144874" comment="libsss_nss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144875" comment="libsss_nss_idmap0-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145130" comment="libipa_hbac-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145131" comment="libsss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145132" comment="libsss_nss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145133" comment="libsss_nss_idmap0-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145298" comment="libipa_hbac-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145299" comment="libsss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145300" comment="libsss_nss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145301" comment="libsss_nss_idmap0-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159140" comment="libipa_hbac0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159141" comment="libsss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159142" comment="libsss_nss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159143" comment="libsss_sudo-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159144" comment="python-sssd-config-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159145" comment="sssd-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159146" comment="sssd-32bit-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159147" comment="sssd-ad-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159148" comment="sssd-ipa-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159149" comment="sssd-krb5-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159150" comment="sssd-krb5-common-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159151" comment="sssd-ldap-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159152" comment="sssd-proxy-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159153" comment="sssd-tools-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159812" comment="libipa_hbac-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159813" comment="libsss_idmap-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159814" comment="libsss_nss_idmap-devel-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512322" comment="libipa_hbac0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512323" comment="libsss_certmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512324" comment="libsss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512325" comment="libsss_nss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512326" comment="libsss_simpleifp0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166514" comment="libsss_sudo-1.13.4-34.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512327" comment="python-sssd-config-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512328" comment="sssd-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512329" comment="sssd-32bit-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512330" comment="sssd-ad-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512331" comment="sssd-ipa-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512332" comment="sssd-krb5-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512333" comment="sssd-krb5-common-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512334" comment="sssd-ldap-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512335" comment="sssd-proxy-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512336" comment="sssd-tools-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513122" comment="libipa_hbac0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513123" comment="libsss_certmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513124" comment="libsss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513125" comment="libsss_nss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513126" comment="libsss_simpleifp0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513127" comment="python-sssd-config-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513128" comment="sssd-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513129" comment="sssd-32bit-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513130" comment="sssd-ad-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513131" comment="sssd-ipa-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513132" comment="sssd-krb5-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513133" comment="sssd-krb5-common-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513134" comment="sssd-ldap-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513135" comment="sssd-proxy-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513136" comment="sssd-tools-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513732" comment="libipa_hbac-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513733" comment="libsss_idmap-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513734" comment="libsss_nss_idmap-devel-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514066" comment="libipa_hbac-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514067" comment="libsss_idmap-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514068" comment="libsss_nss_idmap-devel-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0220</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0220" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0220" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0220" ref_url="https://www.suse.com/security/cve/CVE-2013-0220" source="SUSE CVE"/>
    <description>
    The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0220/">CVE-2013-0220</cve>
	<bugzilla href="https://bugzilla.suse.com/801036">SUSE bug 801036</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140853" comment="sssd-32bit-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141537" comment="libipa_hbac0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141538" comment="libsss_idmap0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141539" comment="python-sssd-config-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141540" comment="sssd-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141541" comment="sssd-32bit-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141542" comment="sssd-ad-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141543" comment="sssd-ipa-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141544" comment="sssd-krb5-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141545" comment="sssd-krb5-common-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141546" comment="sssd-ldap-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141547" comment="sssd-proxy-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141548" comment="sssd-tools-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141980" comment="libipa_hbac0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141981" comment="libsss_idmap0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141982" comment="libsss_sudo-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141983" comment="python-sssd-config-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141984" comment="sssd-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141985" comment="sssd-32bit-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141986" comment="sssd-ad-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141987" comment="sssd-ipa-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141988" comment="sssd-krb5-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141989" comment="sssd-krb5-common-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141990" comment="sssd-ldap-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141991" comment="sssd-proxy-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141992" comment="sssd-tools-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144872" comment="libipa_hbac-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144873" comment="libsss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144874" comment="libsss_nss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144875" comment="libsss_nss_idmap0-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145130" comment="libipa_hbac-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145131" comment="libsss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145132" comment="libsss_nss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145133" comment="libsss_nss_idmap0-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145298" comment="libipa_hbac-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145299" comment="libsss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145300" comment="libsss_nss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145301" comment="libsss_nss_idmap0-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159140" comment="libipa_hbac0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159141" comment="libsss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159142" comment="libsss_nss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159143" comment="libsss_sudo-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159144" comment="python-sssd-config-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159145" comment="sssd-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159146" comment="sssd-32bit-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159147" comment="sssd-ad-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159148" comment="sssd-ipa-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159149" comment="sssd-krb5-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159150" comment="sssd-krb5-common-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159151" comment="sssd-ldap-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159152" comment="sssd-proxy-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159153" comment="sssd-tools-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159812" comment="libipa_hbac-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159813" comment="libsss_idmap-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159814" comment="libsss_nss_idmap-devel-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512322" comment="libipa_hbac0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512323" comment="libsss_certmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512324" comment="libsss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512325" comment="libsss_nss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512326" comment="libsss_simpleifp0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166514" comment="libsss_sudo-1.13.4-34.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512327" comment="python-sssd-config-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512328" comment="sssd-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512329" comment="sssd-32bit-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512330" comment="sssd-ad-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512331" comment="sssd-ipa-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512332" comment="sssd-krb5-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512333" comment="sssd-krb5-common-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512334" comment="sssd-ldap-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512335" comment="sssd-proxy-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512336" comment="sssd-tools-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513122" comment="libipa_hbac0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513123" comment="libsss_certmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513124" comment="libsss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513125" comment="libsss_nss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513126" comment="libsss_simpleifp0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513127" comment="python-sssd-config-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513128" comment="sssd-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513129" comment="sssd-32bit-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513130" comment="sssd-ad-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513131" comment="sssd-ipa-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513132" comment="sssd-krb5-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513133" comment="sssd-krb5-common-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513134" comment="sssd-ldap-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513135" comment="sssd-proxy-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513136" comment="sssd-tools-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513732" comment="libipa_hbac-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513733" comment="libsss_idmap-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513734" comment="libsss_nss_idmap-devel-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514066" comment="libipa_hbac-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514067" comment="libsss_idmap-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514068" comment="libsss_nss_idmap-devel-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0221</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0221" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0221" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0221" ref_url="https://www.suse.com/security/cve/CVE-2013-0221" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-September/000600.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0233-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0930-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00032.html" source="SUSE-SU"/>
    <description>
    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0221/">CVE-2013-0221</cve>
	<bugzilla href="https://bugzilla.suse.com/798538">SUSE bug 798538</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114699" comment="coreutils-8.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114700" comment="coreutils-lang-8.22-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140496" comment="coreutils-8.25-12.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140497" comment="coreutils-lang-8.25-12.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141243" comment="coreutils-8.22-5.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141244" comment="coreutils-lang-8.22-5.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143145" comment="coreutils-8.22-5.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143146" comment="coreutils-lang-8.22-5.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512066" comment="coreutils-8.25-13.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512067" comment="coreutils-lang-8.25-13.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0222</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0222" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0222" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0222" ref_url="https://www.suse.com/security/cve/CVE-2013-0222" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-September/000600.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0233-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0930-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00032.html" source="SUSE-SU"/>
    <description>
    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0222/">CVE-2013-0222</cve>
	<bugzilla href="https://bugzilla.suse.com/796243">SUSE bug 796243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798538">SUSE bug 798538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798541">SUSE bug 798541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114699" comment="coreutils-8.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114700" comment="coreutils-lang-8.22-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140496" comment="coreutils-8.25-12.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140497" comment="coreutils-lang-8.25-12.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141243" comment="coreutils-8.22-5.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141244" comment="coreutils-lang-8.22-5.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143145" comment="coreutils-8.22-5.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143146" comment="coreutils-lang-8.22-5.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512066" comment="coreutils-8.25-13.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512067" comment="coreutils-lang-8.25-13.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0223</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0223" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0223" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0223" ref_url="https://www.suse.com/security/cve/CVE-2013-0223" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-September/000600.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0232-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0233-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0237-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0930-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-05/msg00032.html" source="SUSE-SU"/>
    <description>
    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0223/">CVE-2013-0223</cve>
	<bugzilla href="https://bugzilla.suse.com/798538">SUSE bug 798538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798541">SUSE bug 798541</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009114699" comment="coreutils-8.22-9.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114700" comment="coreutils-lang-8.22-9.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140496" comment="coreutils-8.25-12.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140497" comment="coreutils-lang-8.25-12.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141243" comment="coreutils-8.22-5.17 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141244" comment="coreutils-lang-8.22-5.17 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143145" comment="coreutils-8.22-5.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143146" comment="coreutils-lang-8.22-5.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512066" comment="coreutils-8.25-13.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512067" comment="coreutils-lang-8.25-13.7.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0228</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0228" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0228" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0228" ref_url="https://www.suse.com/security/cve/CVE-2013-0228" source="SUSE CVE"/>
    <description>
    The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0228/">CVE-2013-0228</cve>
	<bugzilla href="https://bugzilla.suse.com/801179">SUSE bug 801179</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0231</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0231" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0231" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0231" ref_url="https://www.suse.com/security/cve/CVE-2013-0231" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:14051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-May/005470.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
    <description>
    The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0231/">CVE-2013-0231</cve>
	<bugzilla href="https://bugzilla.suse.com/801178">SUSE bug 801178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0240</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0240" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0240" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0240" ref_url="https://www.suse.com/security/cve/CVE-2013-0240" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0301-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00046.html" source="SUSE-SU"/>
    <description>
    Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0240/">CVE-2013-0240</cve>
	<bugzilla href="https://bugzilla.suse.com/802409">SUSE bug 802409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/808534">SUSE bug 808534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140636" comment="libgoa-1_0-0-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140637" comment="libgoa-backend-1_0-1-3.20.4-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141400" comment="gnome-online-accounts-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141401" comment="gnome-online-accounts-lang-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141402" comment="libgoa-1_0-0-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141403" comment="libgoa-backend-1_0-1-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141404" comment="typelib-1_0-Goa-1_0-3.10.5-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141400" comment="gnome-online-accounts-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141401" comment="gnome-online-accounts-lang-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141404" comment="typelib-1_0-Goa-1_0-3.10.5-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141402" comment="libgoa-1_0-0-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141403" comment="libgoa-backend-1_0-1-3.10.5-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142108" comment="gnome-online-accounts-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142109" comment="gnome-online-accounts-lang-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140636" comment="libgoa-1_0-0-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142110" comment="libgoa-1_0-0-32bit-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140637" comment="libgoa-backend-1_0-1-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142111" comment="typelib-1_0-Goa-1_0-3.20.4-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142108" comment="gnome-online-accounts-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142109" comment="gnome-online-accounts-lang-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142110" comment="libgoa-1_0-0-32bit-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142111" comment="typelib-1_0-Goa-1_0-3.20.4-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143234" comment="libgoa-1_0-0-3.10.5-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143235" comment="libgoa-backend-1_0-1-3.10.5-1.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144777" comment="gnome-online-accounts-devel-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141404" comment="typelib-1_0-Goa-1_0-3.10.5-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145243" comment="gnome-online-accounts-devel-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142111" comment="typelib-1_0-Goa-1_0-3.20.4-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159138" comment="libgoa-1_0-0-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159139" comment="libgoa-backend-1_0-1-3.20.5-9.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159641" comment="gnome-online-accounts-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159642" comment="gnome-online-accounts-lang-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159138" comment="libgoa-1_0-0-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159643" comment="libgoa-1_0-0-32bit-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159139" comment="libgoa-backend-1_0-1-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159644" comment="typelib-1_0-Goa-1_0-3.20.5-9.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159641" comment="gnome-online-accounts-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159642" comment="gnome-online-accounts-lang-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159643" comment="libgoa-1_0-0-32bit-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159644" comment="typelib-1_0-Goa-1_0-3.20.5-9.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159760" comment="gnome-online-accounts-devel-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159644" comment="typelib-1_0-Goa-1_0-3.20.5-9.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513117" comment="libgoa-1_0-0-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513118" comment="libgoa-backend-1_0-1-3.20.8-10.4.50 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513981" comment="gnome-online-accounts-devel-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513982" comment="typelib-1_0-Goa-1_0-3.20.8-10.4.50 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514281" comment="gnome-online-accounts-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514282" comment="gnome-online-accounts-lang-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514283" comment="libgoa-1_0-0-32bit-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513982" comment="typelib-1_0-Goa-1_0-3.20.8-10.4.50 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0242</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0242" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0242" ref_url="https://www.suse.com/security/cve/CVE-2013-0242" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1122-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1128-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0242/">CVE-2013-0242</cve>
	<bugzilla href="https://bugzilla.suse.com/801246">SUSE bug 801246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/848783">SUSE bug 848783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144776" comment="glibc-devel-static-2.19-17.72 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140628" comment="glibc-profile-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141386" comment="glibc-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141387" comment="glibc-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141388" comment="glibc-devel-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141389" comment="glibc-devel-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141390" comment="glibc-i18ndata-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141391" comment="glibc-locale-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141392" comment="glibc-locale-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141393" comment="nscd-2.19-17.72 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141386" comment="glibc-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141387" comment="glibc-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141388" comment="glibc-devel-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141389" comment="glibc-devel-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143193" comment="glibc-html-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141390" comment="glibc-i18ndata-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143194" comment="glibc-info-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141391" comment="glibc-locale-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141392" comment="glibc-locale-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143195" comment="glibc-profile-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143196" comment="glibc-profile-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141393" comment="nscd-2.19-17.72 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141868" comment="glibc-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141869" comment="glibc-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141870" comment="glibc-devel-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141871" comment="glibc-devel-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141872" comment="glibc-i18ndata-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141873" comment="glibc-locale-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141874" comment="glibc-locale-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141875" comment="nscd-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141868" comment="glibc-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141869" comment="glibc-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141870" comment="glibc-devel-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141871" comment="glibc-devel-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143333" comment="glibc-html-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141872" comment="glibc-i18ndata-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143334" comment="glibc-info-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141873" comment="glibc-locale-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141874" comment="glibc-locale-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143335" comment="glibc-profile-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143336" comment="glibc-profile-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141875" comment="nscd-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145037" comment="glibc-devel-static-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143334" comment="glibc-info-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145242" comment="glibc-devel-static-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156986" comment="glibc-html-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156988" comment="glibc-profile-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157048" comment="glibc-profile-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157042" comment="glibc-devel-static-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513507" comment="glibc-html-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513509" comment="glibc-profile-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513510" comment="glibc-profile-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512877" comment="glibc-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512878" comment="glibc-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512879" comment="glibc-devel-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512880" comment="glibc-devel-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512881" comment="glibc-html-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512882" comment="glibc-i18ndata-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512884" comment="glibc-locale-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512885" comment="glibc-locale-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512886" comment="glibc-profile-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512887" comment="glibc-profile-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512888" comment="nscd-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513676" comment="glibc-devel-static-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513980" comment="glibc-devel-static-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0249</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0249" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0249" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0249" ref_url="https://www.suse.com/security/cve/CVE-2013-0249" source="SUSE CVE"/>
    <description>
    Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-0249/">CVE-2013-0249</cve>
	<bugzilla href="https://bugzilla.suse.com/802411">SUSE bug 802411</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131794" comment="libcurl-devel-7.37.0-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144822" comment="libcurl-devel-7.37.0-2.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154450" comment="libcurl-devel-7.37.0-36.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513722" comment="libcurl-devel-7.60.0-2.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514059" comment="libcurl-devel-7.60.0-9.8 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110171" comment="libcurl4-32bit-7.37.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131101" comment="curl-7.37.0-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131102" comment="libcurl4-7.37.0-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131103" comment="libcurl4-32bit-7.37.0-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131101" comment="curl-7.37.0-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131102" comment="libcurl4-7.37.0-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141289" comment="curl-7.37.0-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141290" comment="libcurl4-7.37.0-2.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141291" comment="libcurl4-32bit-7.37.0-2.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009154400" comment="curl-7.37.0-36.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154401" comment="libcurl4-7.37.0-36.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009154402" comment="libcurl4-32bit-7.37.0-36.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512093" comment="curl-7.60.0-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512094" comment="libcurl4-7.60.0-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512095" comment="libcurl4-32bit-7.60.0-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512783" comment="curl-7.60.0-9.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512784" comment="libcurl4-7.60.0-9.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512785" comment="libcurl4-32bit-7.60.0-9.8 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0254</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0254" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0254" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0254" ref_url="https://www.suse.com/security/cve/CVE-2013-0254" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000377.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0403-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0404-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0411-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00019.html" source="SUSE-SU"/>
    <description>
    The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0254/">CVE-2013-0254</cve>
	<bugzilla href="https://bugzilla.suse.com/802634">SUSE bug 802634</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113423" comment="libqt4-sql-mysql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113439" comment="libqt4-sql-sqlite-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113431" comment="libqt4-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113430" comment="libqt4-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113436" comment="libqt4-qt3support-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113435" comment="libqt4-qt3support-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113438" comment="libqt4-sql-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113437" comment="libqt4-sql-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113424" comment="libqt4-sql-mysql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113440" comment="libqt4-sql-sqlite-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113442" comment="libqt4-x11-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113441" comment="libqt4-x11-32bit-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113422" comment="qt4-x11-tools-4.8.6-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113432" comment="libqt4-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113420" comment="libqt4-devel-doc-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113421" comment="libqt4-devel-doc-data-4.8.6-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113433" comment="libqt4-linguist-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113434" comment="libqt4-private-headers-devel-4.8.6-4.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113427" comment="libqt4-sql-postgresql-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113426" comment="libqt4-sql-postgresql-32bit-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113429" comment="libqt4-sql-unixODBC-4.8.6-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113428" comment="libqt4-sql-unixODBC-32bit-4.8.6-4.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125269" comment="libqt4-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125271" comment="libqt4-qt3support-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125273" comment="libqt4-sql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125284" comment="libqt4-x11-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125268" comment="libqt4-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125270" comment="libqt4-qt3support-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125272" comment="libqt4-sql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125274" comment="libqt4-sql-mysql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125279" comment="libqt4-sql-sqlite-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125283" comment="libqt4-x11-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125290" comment="qt4-x11-tools-4.8.6-7.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125275" comment="libqt4-sql-mysql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125280" comment="libqt4-sql-sqlite-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009125285" comment="libqt4-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125286" comment="libqt4-devel-doc-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125287" comment="libqt4-devel-doc-data-4.8.6-7.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125288" comment="libqt4-linguist-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125289" comment="libqt4-private-headers-devel-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125277" comment="libqt4-sql-postgresql-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125278" comment="libqt4-sql-postgresql-32bit-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125281" comment="libqt4-sql-unixODBC-4.8.6-7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009125282" comment="libqt4-sql-unixODBC-32bit-4.8.6-7.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141612" comment="libqt4-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141614" comment="libqt4-qt3support-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141616" comment="libqt4-sql-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141622" comment="libqt4-sql-sqlite-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141626" comment="libqt4-x11-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141619" comment="libqt4-sql-mysql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141623" comment="libqt4-sql-sqlite-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143250" comment="libqt4-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141613" comment="libqt4-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143251" comment="libqt4-qt3support-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141615" comment="libqt4-qt3support-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143252" comment="libqt4-sql-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141617" comment="libqt4-sql-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141618" comment="libqt4-sql-mysql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143253" comment="libqt4-sql-sqlite-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143254" comment="libqt4-x11-4.8.6-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141627" comment="libqt4-x11-32bit-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143255" comment="qt4-x11-tools-4.8.6-2.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144917" comment="libqt4-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144918" comment="libqt4-devel-doc-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144919" comment="libqt4-devel-doc-data-4.8.6-2.29 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144920" comment="libqt4-linguist-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144921" comment="libqt4-private-headers-devel-4.8.6-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141620" comment="libqt4-sql-postgresql-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141621" comment="libqt4-sql-postgresql-32bit-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141624" comment="libqt4-sql-unixODBC-4.8.6-2.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141625" comment="libqt4-sql-unixODBC-32bit-4.8.6-2.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512399" comment="libqt4-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512400" comment="libqt4-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512401" comment="libqt4-qt3support-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512402" comment="libqt4-qt3support-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512403" comment="libqt4-sql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512404" comment="libqt4-sql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512405" comment="libqt4-sql-mysql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512409" comment="libqt4-sql-sqlite-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512413" comment="libqt4-x11-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512414" comment="libqt4-x11-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513220" comment="qt4-x11-tools-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512406" comment="libqt4-sql-mysql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512410" comment="libqt4-sql-sqlite-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513819" comment="libqt4-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513820" comment="libqt4-devel-doc-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513821" comment="libqt4-devel-doc-data-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513822" comment="libqt4-linguist-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513823" comment="libqt4-private-headers-devel-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512407" comment="libqt4-sql-postgresql-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512408" comment="libqt4-sql-postgresql-32bit-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512411" comment="libqt4-sql-unixODBC-4.8.7-8.8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512412" comment="libqt4-sql-unixODBC-32bit-4.8.7-8.8.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0255</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0255" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0255" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0255" ref_url="https://www.suse.com/security/cve/CVE-2013-0255" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0517-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-March/000395.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0318-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0319-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html" source="SUSE-SU"/>
    <description>
    PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0255/">CVE-2013-0255</cve>
	<bugzilla href="https://bugzilla.suse.com/802679">SUSE bug 802679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803057">SUSE bug 803057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0262</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0262" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0262" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0262" ref_url="https://www.suse.com/security/cve/CVE-2013-0262" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0338-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0462-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html" source="SUSE-SU"/>
    <description>
    rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0262/">CVE-2013-0262</cve>
	<bugzilla href="https://bugzilla.suse.com/802795">SUSE bug 802795</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147497" comment="ruby2.1-rubygem-chef-10.32.2-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147498" comment="rubygem-chef-10.32.2-3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0263</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0263" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0263" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0263" ref_url="https://www.suse.com/security/cve/CVE-2013-0263" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0338-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0462-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html" source="SUSE-SU"/>
    <description>
    Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0263/">CVE-2013-0263</cve>
	<bugzilla href="https://bugzilla.suse.com/802794">SUSE bug 802794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809839">SUSE bug 809839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147497" comment="ruby2.1-rubygem-chef-10.32.2-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147498" comment="rubygem-chef-10.32.2-3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0268</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0268" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0268" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0268" ref_url="https://www.suse.com/security/cve/CVE-2013-0268" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0268/">CVE-2013-0268</cve>
	<bugzilla href="https://bugzilla.suse.com/802642">SUSE bug 802642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0269</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0269" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0269" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0269" ref_url="https://www.suse.com/security/cve/CVE-2013-0269" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0609-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0609-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0612-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0615-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0647-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0603-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00034.html" source="SUSE-SU"/>
    <description>
    The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka "Unsafe Object Creation Vulnerability."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-0269/">CVE-2013-0269</cve>
	<bugzilla href="https://bugzilla.suse.com/1167244">SUSE bug 1167244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171517">SUSE bug 1171517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803342">SUSE bug 803342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807044">SUSE bug 807044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809839">SUSE bug 809839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147497" comment="ruby2.1-rubygem-chef-10.32.2-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147498" comment="rubygem-chef-10.32.2-3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0271</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0271" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0271" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0271" ref_url="https://www.suse.com/security/cve/CVE-2013-0271" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00041.html" source="SUSE-SU"/>
    <description>
    The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0271/">CVE-2013-0271</cve>
	<bugzilla href="https://bugzilla.suse.com/804742">SUSE bug 804742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0272</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0272" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0272" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0272" ref_url="https://www.suse.com/security/cve/CVE-2013-0272" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00041.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0272/">CVE-2013-0272</cve>
	<bugzilla href="https://bugzilla.suse.com/804742">SUSE bug 804742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0273</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0273" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0273" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0273" ref_url="https://www.suse.com/security/cve/CVE-2013-0273" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00041.html" source="SUSE-SU"/>
    <description>
    sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0273/">CVE-2013-0273</cve>
	<bugzilla href="https://bugzilla.suse.com/804742">SUSE bug 804742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0274</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0274" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0274" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0274" ref_url="https://www.suse.com/security/cve/CVE-2013-0274" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0388-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0405-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0407-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0511-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00041.html" source="SUSE-SU"/>
    <description>
    upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local network.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0274/">CVE-2013-0274</cve>
	<bugzilla href="https://bugzilla.suse.com/804742">SUSE bug 804742</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102676" comment="finch-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102682" comment="libpurple-meanwhile-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102683" comment="libpurple-tcl-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102684" comment="pidgin-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009102677" comment="finch-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102678" comment="libpurple-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102680" comment="libpurple-devel-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102681" comment="libpurple-lang-2.10.9-8.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009102685" comment="pidgin-devel-2.10.9-8.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141334" comment="finch-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141337" comment="libpurple-meanwhile-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141338" comment="libpurple-tcl-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141339" comment="pidgin-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142094" comment="finch-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142097" comment="libpurple-meanwhile-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142098" comment="libpurple-tcl-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142099" comment="pidgin-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144735" comment="finch-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141335" comment="libpurple-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144736" comment="libpurple-devel-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141336" comment="libpurple-lang-2.10.9-5.15 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144737" comment="pidgin-devel-2.10.9-5.15 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145219" comment="finch-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142095" comment="libpurple-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145220" comment="libpurple-devel-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142096" comment="libpurple-lang-2.11.0-12.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145221" comment="pidgin-devel-2.11.0-12.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159634" comment="finch-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159636" comment="libpurple-branding-upstream-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159638" comment="libpurple-plugin-sametime-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159639" comment="libpurple-tcl-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159640" comment="pidgin-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159754" comment="finch-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159635" comment="libpurple-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159755" comment="libpurple-devel-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159637" comment="libpurple-lang-2.12.0-1.33 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159756" comment="pidgin-devel-2.12.0-1.33 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512126" comment="finch-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512128" comment="libpurple-branding-upstream-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512130" comment="libpurple-plugin-sametime-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512131" comment="libpurple-tcl-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512132" comment="pidgin-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513653" comment="finch-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512127" comment="libpurple-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513654" comment="libpurple-devel-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512129" comment="libpurple-lang-2.12.0-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513655" comment="pidgin-devel-2.12.0-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0276</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0276" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0276" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0276" ref_url="https://www.suse.com/security/cve/CVE-2013-0276" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0606-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1036-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000483.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0338-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0462-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html" source="SUSE-SU"/>
    <description>
    ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0276/">CVE-2013-0276</cve>
	<bugzilla href="https://bugzilla.suse.com/803336">SUSE bug 803336</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147497" comment="ruby2.1-rubygem-chef-10.32.2-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147498" comment="rubygem-chef-10.32.2-3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0277</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0277" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0277" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0277" ref_url="https://www.suse.com/security/cve/CVE-2013-0277" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0486-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0338-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00071.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0462-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html" source="SUSE-SU"/>
    <description>
    ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0277/">CVE-2013-0277</cve>
	<bugzilla href="https://bugzilla.suse.com/803339">SUSE bug 803339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809839">SUSE bug 809839</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147497" comment="ruby2.1-rubygem-chef-10.32.2-3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147498" comment="rubygem-chef-10.32.2-3.1 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0287</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0287" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0287" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0287" ref_url="https://www.suse.com/security/cve/CVE-2013-0287" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0559-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00115.html" source="SUSE-SU"/>
    <description>
    The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0287/">CVE-2013-0287</cve>
	<bugzilla href="https://bugzilla.suse.com/809153">SUSE bug 809153</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140853" comment="sssd-32bit-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140848" comment="libipa_hbac0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140849" comment="libsss_idmap0-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140850" comment="libsss_sudo-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140851" comment="python-sssd-config-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140852" comment="sssd-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140854" comment="sssd-ad-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140855" comment="sssd-ipa-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140856" comment="sssd-krb5-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140857" comment="sssd-krb5-common-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140858" comment="sssd-ldap-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140859" comment="sssd-proxy-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140860" comment="sssd-tools-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141537" comment="libipa_hbac0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141538" comment="libsss_idmap0-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141539" comment="python-sssd-config-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141540" comment="sssd-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141541" comment="sssd-32bit-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141542" comment="sssd-ad-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141543" comment="sssd-ipa-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141544" comment="sssd-krb5-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141545" comment="sssd-krb5-common-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141546" comment="sssd-ldap-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141547" comment="sssd-proxy-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141548" comment="sssd-tools-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141980" comment="libipa_hbac0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141981" comment="libsss_idmap0-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141982" comment="libsss_sudo-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141983" comment="python-sssd-config-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141984" comment="sssd-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141985" comment="sssd-32bit-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141986" comment="sssd-ad-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141987" comment="sssd-ipa-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141988" comment="sssd-krb5-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141989" comment="sssd-krb5-common-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141990" comment="sssd-ldap-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141991" comment="sssd-proxy-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141992" comment="sssd-tools-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144872" comment="libipa_hbac-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144873" comment="libsss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144874" comment="libsss_nss_idmap-devel-1.11.5.1-5.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144875" comment="libsss_nss_idmap0-1.11.5.1-5.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145130" comment="libipa_hbac-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145131" comment="libsss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145132" comment="libsss_nss_idmap-devel-1.11.5.1-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145133" comment="libsss_nss_idmap0-1.11.5.1-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145298" comment="libipa_hbac-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145299" comment="libsss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145300" comment="libsss_nss_idmap-devel-1.13.4-18.10 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145301" comment="libsss_nss_idmap0-1.13.4-18.10 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159140" comment="libipa_hbac0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159141" comment="libsss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159142" comment="libsss_nss_idmap0-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159143" comment="libsss_sudo-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159144" comment="python-sssd-config-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159145" comment="sssd-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159146" comment="sssd-32bit-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159147" comment="sssd-ad-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159148" comment="sssd-ipa-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159149" comment="sssd-krb5-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159150" comment="sssd-krb5-common-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159151" comment="sssd-ldap-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159152" comment="sssd-proxy-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159153" comment="sssd-tools-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159812" comment="libipa_hbac-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159813" comment="libsss_idmap-devel-1.13.4-33.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159814" comment="libsss_nss_idmap-devel-1.13.4-33.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512322" comment="libipa_hbac0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512323" comment="libsss_certmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512324" comment="libsss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512325" comment="libsss_nss_idmap0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512326" comment="libsss_simpleifp0-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166514" comment="libsss_sudo-1.13.4-34.7.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512327" comment="python-sssd-config-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512328" comment="sssd-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512329" comment="sssd-32bit-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512330" comment="sssd-ad-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512331" comment="sssd-ipa-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512332" comment="sssd-krb5-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512333" comment="sssd-krb5-common-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512334" comment="sssd-ldap-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512335" comment="sssd-proxy-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512336" comment="sssd-tools-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513122" comment="libipa_hbac0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513123" comment="libsss_certmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513124" comment="libsss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513125" comment="libsss_nss_idmap0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513126" comment="libsss_simpleifp0-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513127" comment="python-sssd-config-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513128" comment="sssd-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513129" comment="sssd-32bit-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513130" comment="sssd-ad-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513131" comment="sssd-ipa-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513132" comment="sssd-krb5-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513133" comment="sssd-krb5-common-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513134" comment="sssd-ldap-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513135" comment="sssd-proxy-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513136" comment="sssd-tools-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513732" comment="libipa_hbac-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513733" comment="libsss_idmap-devel-1.16.1-2.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513734" comment="libsss_nss_idmap-devel-1.16.1-2.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514066" comment="libipa_hbac-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514067" comment="libsss_idmap-devel-1.16.1-4.17.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514068" comment="libsss_nss_idmap-devel-1.16.1-4.17.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0290</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0290" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0290" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0290" ref_url="https://www.suse.com/security/cve/CVE-2013-0290" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0951-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1042-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html" source="SUSE-SU"/>
    <description>
    The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSG_PEEK flag with zero-length data, which allows local users to cause a denial of service (infinite loop and system hang) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0290/">CVE-2013-0290</cve>
	<bugzilla href="https://bugzilla.suse.com/803931">SUSE bug 803931</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0292</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0292" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0292" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0292" ref_url="https://www.suse.com/security/cve/CVE-2013-0292" source="SUSE CVE"/>
    <description>
    The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0292/">CVE-2013-0292</cve>
	<bugzilla href="https://bugzilla.suse.com/792095">SUSE bug 792095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804392">SUSE bug 804392</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140539" comment="dbus-1-glib-0.100.2-3.58 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144730" comment="dbus-1-glib-devel-0.100.2-3.58 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140539" comment="dbus-1-glib-0.100.2-3.58 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140540" comment="dbus-1-glib-32bit-0.100.2-3.58 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0309</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0309" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0309" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0309" ref_url="https://www.suse.com/security/cve/CVE-2013-0309" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
    <description>
    arch/x86/include/asm/pgtable.h in the Linux kernel before 3.6.2, when transparent huge pages are used, does not properly support PROT_NONE memory regions, which allows local users to cause a denial of service (system crash) via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0309/">CVE-2013-0309</cve>
	<bugzilla href="https://bugzilla.suse.com/804652">SUSE bug 804652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0310</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0310" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0310" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0310" ref_url="https://www.suse.com/security/cve/CVE-2013-0310" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an IPOPT_CIPSO IP_OPTIONS setsockopt system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0310/">CVE-2013-0310</cve>
	<bugzilla href="https://bugzilla.suse.com/1133087">SUSE bug 1133087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804653">SUSE bug 804653</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0311</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0311" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0311" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0311" ref_url="https://www.suse.com/security/cve/CVE-2013-0311" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0311/">CVE-2013-0311</cve>
	<bugzilla href="https://bugzilla.suse.com/804656">SUSE bug 804656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0313</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0313" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0313" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0313" ref_url="https://www.suse.com/security/cve/CVE-2013-0313" source="SUSE CVE"/>
    <description>
    The evm_update_evmxattr function in security/integrity/evm/evm_crypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module (EVM) is enabled, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an attempted removexattr operation on an inode of a sockfs filesystem.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0313/">CVE-2013-0313</cve>
	<bugzilla href="https://bugzilla.suse.com/804903">SUSE bug 804903</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130334" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0334</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0334" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0334" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0334" ref_url="https://www.suse.com/security/cve/CVE-2013-0334" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-April/001365.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2015:0628-1" ref_url="https://lists.opensuse.org/opensuse-updates/2015-03/msg00092.html" source="SUSE-SU"/>
    <description>
    Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0334/">CVE-2013-0334</cve>
	<bugzilla href="https://bugzilla.suse.com/898205">SUSE bug 898205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/922719">SUSE bug 922719</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144990" comment="ruby2.1-rubygem-bundler-1.7.3-1.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145183" comment="ruby2.1-rubygem-bundler-1.7.3-3.8 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0338</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0338" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0338" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0338" ref_url="https://www.suse.com/security/cve/CVE-2013-0338" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000441.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000442.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1625-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0552-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0555-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00114.html" source="SUSE-SU"/>
    <description>
    libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0338/">CVE-2013-0338</cve>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/805233">SUSE bug 805233</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103734" comment="libxml2-devel-2.9.1-10.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144964" comment="libxml2-devel-2.9.1-6.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145350" comment="libxml2-devel-2.9.4-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157778" comment="libxml2-devel-2.9.4-45.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513851" comment="libxml2-devel-2.9.4-46.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514210" comment="libxml2-devel-2.9.4-46.20.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103736" comment="libxml2-doc-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009103731" comment="libxml2-2-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103732" comment="libxml2-2-32bit-2.9.1-10.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009103737" comment="libxml2-tools-2.9.1-10.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141033" comment="libxml2-2-32bit-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141032" comment="libxml2-2-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141034" comment="libxml2-doc-2.9.4-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141035" comment="libxml2-tools-2.9.4-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141749" comment="libxml2-2-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141750" comment="libxml2-2-32bit-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143262" comment="libxml2-doc-2.9.1-6.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141751" comment="libxml2-tools-2.9.1-6.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157768" comment="libxml2-2-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157769" comment="libxml2-2-32bit-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157775" comment="libxml2-doc-2.9.4-45.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157770" comment="libxml2-tools-2.9.4-45.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512561" comment="libxml2-2-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512562" comment="libxml2-2-32bit-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513557" comment="libxml2-doc-2.9.4-46.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512563" comment="libxml2-tools-2.9.4-46.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513309" comment="libxml2-2-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513310" comment="libxml2-2-32bit-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513311" comment="libxml2-doc-2.9.4-46.20.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513312" comment="libxml2-tools-2.9.4-46.20.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0343</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0343" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0343" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0343" ref_url="https://www.suse.com/security/cve/CVE-2013-0343" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-June/000880.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0766-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-06/msg00013.html" source="SUSE-SU"/>
    <description>
    The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0343/">CVE-2013-0343</cve>
	<bugzilla href="https://bugzilla.suse.com/805226">SUSE bug 805226</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0349</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0349" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0349" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0349" ref_url="https://www.suse.com/security/cve/CVE-2013-0349" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0349/">CVE-2013-0349</cve>
	<bugzilla href="https://bugzilla.suse.com/805227">SUSE bug 805227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0351</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0351" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0351" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0351" ref_url="https://www.suse.com/security/cve/CVE-2013-0351" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0351/">CVE-2013-0351</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0401</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0401" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0401" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0401" ref_url="https://www.suse.com/security/cve/CVE-2013-0401" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0745-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0777-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0964-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0993-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00129.html" source="SUSE-SU"/>
    <description>
    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0401/">CVE-2013-0401</cve>
	<bugzilla href="https://bugzilla.suse.com/816720">SUSE bug 816720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817157">SUSE bug 817157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819288">SUSE bug 819288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0409</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0409" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0409" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0409" ref_url="https://www.suse.com/security/cve/CVE-2013-0409" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0409/">CVE-2013-0409</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0419</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0419" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0419" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0419" ref_url="https://www.suse.com/security/cve/CVE-2013-0419" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-19"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0419/">CVE-2013-0419</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0422</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0422" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0422" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0422" ref_url="https://www.suse.com/security/cve/CVE-2013-0422" source="SUSE CVE"/>
		<reference ref_id="TID7011765" ref_url="https://www.suse.com/support/kb/doc/?id=7011765" source="SUSE-SU"/>
		<reference ref_id="TID7021279" ref_url="https://www.suse.com/support/kb/doc/?id=7021279" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="TID7021518" ref_url="https://www.suse.com/support/kb/doc/?id=7021518" source="SUSE-SU"/>
		<reference ref_id="TID7021676" ref_url="https://www.suse.com/support/kb/doc/?id=7021676" source="SUSE-SU"/>
		<reference ref_id="TID7021823" ref_url="https://www.suse.com/support/kb/doc/?id=7021823" source="SUSE-SU"/>
		<reference ref_id="TID7021848" ref_url="https://www.suse.com/support/kb/doc/?id=7021848" source="SUSE-SU"/>
		<reference ref_id="TID7021874" ref_url="https://www.suse.com/support/kb/doc/?id=7021874" source="SUSE-SU"/>
		<reference ref_id="TID7022077" ref_url="https://www.suse.com/support/kb/doc/?id=7022077" source="SUSE-SU"/>
		<reference ref_id="TID7022102" ref_url="https://www.suse.com/support/kb/doc/?id=7022102" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0199-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00025.html" source="SUSE-SU"/>
    <description>
    Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114.  CVE-2013-0422 covers both the JMX/MBean and Reflection API issues.  NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks.  NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11.  If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0422/">CVE-2013-0422</cve>
	<bugzilla href="https://bugzilla.suse.com/798324">SUSE bug 798324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798521">SUSE bug 798521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0423</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0423" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0423" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0423" ref_url="https://www.suse.com/security/cve/CVE-2013-0423" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0423/">CVE-2013-0423</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0424</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0424" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0424" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0424" ref_url="https://www.suse.com/security/cve/CVE-2013-0424" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0424/">CVE-2013-0424</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0425</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0425" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0425" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0425" ref_url="https://www.suse.com/security/cve/CVE-2013-0425" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0428 and CVE-2013-0426.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0425/">CVE-2013-0425</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0426</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0426" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0426" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0426" ref_url="https://www.suse.com/security/cve/CVE-2013-0426" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0428.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0426/">CVE-2013-0426</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0427</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0427" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0427" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0427" ref_url="https://www.suse.com/security/cve/CVE-2013-0427" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0427/">CVE-2013-0427</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0428</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0428" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0428" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0428" ref_url="https://www.suse.com/security/cve/CVE-2013-0428" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0426.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect checks for proxy classes" in the Reflection API.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0428/">CVE-2013-0428</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0429</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0429" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0429" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0429" ref_url="https://www.suse.com/security/cve/CVE-2013-0429" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue involves the creation of a single PresentationManager that is shared across multiple thread groups, which allows remote attackers to bypass Java sandbox restrictions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0429/">CVE-2013-0429</cve>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0431</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0431" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0431" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0431" ref_url="https://www.suse.com/security/cve/CVE-2013-0431" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0431/">CVE-2013-0431</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0432</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0432" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0432" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0432" ref_url="https://www.suse.com/security/cve/CVE-2013-0432" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to AWT.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient clipboard access premission checks."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0432/">CVE-2013-0432</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0433</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0433" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0433" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0433" ref_url="https://www.suse.com/security/cve/CVE-2013-0433" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Networking.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to avoid triggering an exception during the deserialization of invalid InetSocketAddress data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0433/">CVE-2013-0433</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0434</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0434" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0434" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0434" ref_url="https://www.suse.com/security/cve/CVE-2013-0434" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAXP.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the public declaration of the loadPropertyFile method in the JAXP FuncSystemProperty class, which allows remote attackers to obtain sensitive information.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0434/">CVE-2013-0434</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0435</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0435" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0435" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0435" ref_url="https://www.suse.com/security/cve/CVE-2013-0435" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAX-WS.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper restriction of com.sun.xml.internal packages and "Better handling of UI elements."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0435/">CVE-2013-0435</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0438</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0438" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0438" ref_url="https://www.suse.com/security/cve/CVE-2013-0438" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0438/">CVE-2013-0438</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0440</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0440" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0440" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0440" ref_url="https://www.suse.com/security/cve/CVE-2013-0440" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect availability via vectors related to JSSE.  NOTE: the previous information is from the February 2013 CPU.  Oracle has not commented on claims from another vendor that this issue is related to CPU consumption in the SSL/TLS implementation via a large number of ClientHello packets that are not properly handled by (1) ClientHandshaker.java and (2) ServerHandshaker.java.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0440/">CVE-2013-0440</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0441</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0441" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0441" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0441" ref_url="https://www.suse.com/security/cve/CVE-2013-0441" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-1476 and CVE-2013-1475.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via certain methods that should not be serialized, aka "missing serialization restriction."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0441/">CVE-2013-0441</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0442</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0442" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0442" ref_url="https://www.suse.com/security/cve/CVE-2013-0442" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of "privileges of the code" that bypasses the sandbox.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0442/">CVE-2013-0442</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0443</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0443" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0443" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0443" ref_url="https://www.suse.com/security/cve/CVE-2013-0443" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect validation of Diffie-Hellman keys, which allows remote attackers to conduct a "small subgroup attack" to force the use of weak session keys or obtain sensitive information about the private key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0443/">CVE-2013-0443</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0444</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0444" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0444" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0444" ref_url="https://www.suse.com/security/cve/CVE-2013-0444" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient checks for cached results" by the Java Beans MethodFinder, which might allow attackers to access methods that should only be accessible to privileged code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0444/">CVE-2013-0444</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0445</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0445" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0445" ref_url="https://www.suse.com/security/cve/CVE-2013-0445" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of "privileges of the code" that bypasses the sandbox.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0445/">CVE-2013-0445</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0446</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0446" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0446" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0446" ref_url="https://www.suse.com/security/cve/CVE-2013-0446" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0446/">CVE-2013-0446</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0450</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0450" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0450" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0450" ref_url="https://www.suse.com/security/cve/CVE-2013-0450" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper checks of "access control context" in the JMX RequiredModelMBean class.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0450/">CVE-2013-0450</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0454</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0454" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0454" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0454" ref_url="https://www.suse.com/security/cve/CVE-2013-0454" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0823-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0933-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00070.html" source="SUSE-SU"/>
    <description>
    The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0454/">CVE-2013-0454</cve>
	<bugzilla href="https://bugzilla.suse.com/811975">SUSE bug 811975</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0485</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0485" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0485" ref_url="https://www.suse.com/security/cve/CVE-2013-0485" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0485/">CVE-2013-0485</cve>
	<bugzilla href="https://bugzilla.suse.com/813939">SUSE bug 813939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0504</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0504" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0504" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0504" ref_url="https://www.suse.com/security/cve/CVE-2013-0504" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0373-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0359-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00012.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-01"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0504/">CVE-2013-0504</cve>
	<bugzilla href="https://bugzilla.suse.com/806415">SUSE bug 806415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/867808">SUSE bug 867808</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0630</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0630" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0630" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0630" ref_url="https://www.suse.com/security/cve/CVE-2013-0630" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0033-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0121-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0128-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0168-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-01/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0364-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00084.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0630/">CVE-2013-0630</cve>
	<bugzilla href="https://bugzilla.suse.com/797442">SUSE bug 797442</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0633</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0633" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0633" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0633" ref_url="https://www.suse.com/security/cve/CVE-2013-0633" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0279-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0633/">CVE-2013-0633</cve>
	<bugzilla href="https://bugzilla.suse.com/802809">SUSE bug 802809</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0634</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0634" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0634" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0634" ref_url="https://www.suse.com/security/cve/CVE-2013-0634" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0288-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0279-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0279-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0284-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00006.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, as exploited in the wild in February 2013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0634/">CVE-2013-0634</cve>
	<bugzilla href="https://bugzilla.suse.com/802809">SUSE bug 802809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/933288">SUSE bug 933288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0637</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0637" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0637" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0637" ref_url="https://www.suse.com/security/cve/CVE-2013-0637" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to obtain sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-0637/">CVE-2013-0637</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0638</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0638" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0638" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0638" ref_url="https://www.suse.com/security/cve/CVE-2013-0638" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0647.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0638/">CVE-2013-0638</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0639</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0639" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0639" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0639" ref_url="https://www.suse.com/security/cve/CVE-2013-0639" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0639/">CVE-2013-0639</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0642</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0642" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0642" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0642" ref_url="https://www.suse.com/security/cve/CVE-2013-0642" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0642/">CVE-2013-0642</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0643</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0643" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0643" ref_url="https://www.suse.com/security/cve/CVE-2013-0643" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0373-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0359-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00026.html" source="SUSE-SU"/>
    <description>
    The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0643/">CVE-2013-0643</cve>
	<bugzilla href="https://bugzilla.suse.com/806415">SUSE bug 806415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0644</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0644" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0644" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0644" ref_url="https://www.suse.com/security/cve/CVE-2013-0644" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0649 and CVE-2013-1374.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0644/">CVE-2013-0644</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0645</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0645" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0645" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0645" ref_url="https://www.suse.com/security/cve/CVE-2013-0645" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0645/">CVE-2013-0645</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0646</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0646" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0646" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0646" ref_url="https://www.suse.com/security/cve/CVE-2013-0646" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Integer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK &amp; Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0646/">CVE-2013-0646</cve>
	<bugzilla href="https://bugzilla.suse.com/808973">SUSE bug 808973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0647</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0647" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0647" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0647" ref_url="https://www.suse.com/security/cve/CVE-2013-0647" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0638.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0647/">CVE-2013-0647</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0648</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0648" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0648" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0648" ref_url="https://www.suse.com/security/cve/CVE-2013-0648" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0373-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0359-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0359-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0360-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00026.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0648/">CVE-2013-0648</cve>
	<bugzilla href="https://bugzilla.suse.com/806415">SUSE bug 806415</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0649</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0649" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0649" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0649" ref_url="https://www.suse.com/security/cve/CVE-2013-0649" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-1374.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0649/">CVE-2013-0649</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0650</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0650" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0650" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0650" ref_url="https://www.suse.com/security/cve/CVE-2013-0650" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK &amp; Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0650/">CVE-2013-0650</cve>
	<bugzilla href="https://bugzilla.suse.com/808973">SUSE bug 808973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0743</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0743" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0743" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0743" ref_url="https://www.suse.com/security/cve/CVE-2013-0743" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA at the suggestion of the CVE project team.  The candidate had been associated with a correct report of a security problem, but not a problem that is categorized as a vulnerability within CVE.  Compromised or unauthorized SSL certificates are not within CVE's scope.  Notes: none.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0743/">CVE-2013-0743</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116020" comment="libfreebl3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116021" comment="libfreebl3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116024" comment="libsoftokn3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116025" comment="libsoftokn3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116031" comment="mozilla-nss-devel-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129313" comment="libfreebl3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129315" comment="libsoftokn3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129306" comment="mozilla-nss-devel-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143227" comment="libfreebl3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143228" comment="libfreebl3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143229" comment="libsoftokn3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143230" comment="libsoftokn3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144970" comment="mozilla-nss-devel-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155339" comment="libfreebl3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155342" comment="libfreebl3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155340" comment="libsoftokn3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155343" comment="libsoftokn3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155345" comment="mozilla-nss-devel-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513535" comment="libfreebl3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513536" comment="libfreebl3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513537" comment="libsoftokn3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513538" comment="libsoftokn3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513097" comment="libfreebl3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513098" comment="libfreebl3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513099" comment="libfreebl3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513100" comment="libfreebl3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513101" comment="libsoftokn3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513102" comment="libsoftokn3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513103" comment="libsoftokn3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513104" comment="libsoftokn3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513105" comment="mozilla-nss-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513106" comment="mozilla-nss-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513107" comment="mozilla-nss-certs-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513108" comment="mozilla-nss-certs-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513109" comment="mozilla-nss-sysinit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513110" comment="mozilla-nss-sysinit-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513111" comment="mozilla-nss-tools-3.45-58.31.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513857" comment="mozilla-nss-devel-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514218" comment="mozilla-nss-devel-3.45-58.31.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0744</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0744" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0744" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0744" ref_url="https://www.suse.com/security/cve/CVE-2013-0744" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an HTML document with a table containing many columns and column groups.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0744/">CVE-2013-0744</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0745</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0745" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0745" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0745" ref_url="https://www.suse.com/security/cve/CVE-2013-0745" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly interact with garbage collection, which allows remote attackers to execute arbitrary code via a crafted HTML document referencing JavaScript objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0745/">CVE-2013-0745</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0746</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0746" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0746" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0746" ref_url="https://www.suse.com/security/cve/CVE-2013-0746" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 do not properly implement quickstubs that use the jsval data type for their return values, which allows remote attackers to execute arbitrary code or cause a denial of service (compartment mismatch and application crash) via crafted JavaScript code that is not properly handled during garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0746/">CVE-2013-0746</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0747</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0747" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0747" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0747" ref_url="https://www.suse.com/security/cve/CVE-2013-0747" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly enforce the Same Origin Policy, which allows remote attackers to conduct clickjacking attacks via crafted JavaScript code that listens for a mutation event.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0747/">CVE-2013-0747</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0748</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0748" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0748" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0748" ref_url="https://www.suse.com/security/cve/CVE-2013-0748" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 makes it easier for remote attackers to bypass the ASLR protection mechanism by calling the toString function of an XBL object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-18"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0748/">CVE-2013-0748</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0749</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0749" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0749" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0749" ref_url="https://www.suse.com/security/cve/CVE-2013-0749" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0749/">CVE-2013-0749</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0750</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0750" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0750" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0750" ref_url="https://www.suse.com/security/cve/CVE-2013-0750" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted string concatenation, leading to improper memory allocation and a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0750/">CVE-2013-0750</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0751</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0751" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0751" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0751" ref_url="https://www.suse.com/security/cve/CVE-2013-0751" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME element, which allows remote attackers to obtain sensitive information or possibly conduct cross-site scripting (XSS) attacks via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0751/">CVE-2013-0751</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0752</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0752" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0752" ref_url="https://www.suse.com/security/cve/CVE-2013-0752" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XBL file with multiple bindings that have SVG content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0752/">CVE-2013-0752</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0753</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0753" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0753" ref_url="https://www.suse.com/security/cve/CVE-2013-0753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0753/">CVE-2013-0753</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0754</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0754" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0754" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0754" ref_url="https://www.suse.com/security/cve/CVE-2013-0754" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors involving the triggering of garbage collection after memory allocation for listener objects.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0754/">CVE-2013-0754</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0755</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0755" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0755" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0755" ref_url="https://www.suse.com/security/cve/CVE-2013-0755" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors related to the domDoc pointer.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0755/">CVE-2013-0755</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0756</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0756" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0756" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0756" ref_url="https://www.suse.com/security/cve/CVE-2013-0756" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the obj_toSource function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted web page referencing JavaScript Proxy objects that are not properly handled during garbage collection.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0756/">CVE-2013-0756</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0757</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0757" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0757" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0757" ref_url="https://www.suse.com/security/cve/CVE-2013-0757" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not prevent modifications to the prototype of an object, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by referencing Object.prototype.__proto__ in a crafted HTML document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0757/">CVE-2013-0757</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0758</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0758" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0758" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0758" ref_url="https://www.suse.com/security/cve/CVE-2013-0758" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0758/">CVE-2013-0758</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0760</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0760" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0760" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0760" ref_url="https://www.suse.com/security/cve/CVE-2013-0760" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0760/">CVE-2013-0760</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0761</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0761" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0761" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0761" ref_url="https://www.suse.com/security/cve/CVE-2013-0761" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0761/">CVE-2013-0761</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0762</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0762" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0762" ref_url="https://www.suse.com/security/cve/CVE-2013-0762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0762/">CVE-2013-0762</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0763</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0763" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0763" ref_url="https://www.suse.com/security/cve/CVE-2013-0763" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to Mesa drivers and a resized WebGL canvas.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0763/">CVE-2013-0763</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0764</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0764" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0764" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0764" ref_url="https://www.suse.com/security/cve/CVE-2013-0764" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not ensure thread safety for SSL sessions, which allows remote attackers to execute arbitrary code via crafted data, as demonstrated by e-mail message data.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0764/">CVE-2013-0764</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0765</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0765" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0765" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0765" ref_url="https://www.suse.com/security/cve/CVE-2013-0765" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0765/">CVE-2013-0765</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0766</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0766" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0766" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0766" ref_url="https://www.suse.com/security/cve/CVE-2013-0766" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0766/">CVE-2013-0766</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0767" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0767" ref_url="https://www.suse.com/security/cve/CVE-2013-0767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-13"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0767/">CVE-2013-0767</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0768</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0768" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0768" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0768" ref_url="https://www.suse.com/security/cve/CVE-2013-0768" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via an HTML document that specifies invalid width and height values.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-19"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0768/">CVE-2013-0768</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0769</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0769" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0769" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0769" ref_url="https://www.suse.com/security/cve/CVE-2013-0769" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0769/">CVE-2013-0769</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0770</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0770" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0770" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0770" ref_url="https://www.suse.com/security/cve/CVE-2013-0770" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0770/">CVE-2013-0770</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0771</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0771" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0771" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0771" ref_url="https://www.suse.com/security/cve/CVE-2013-0771" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0048-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0131-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0149-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-01/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-17"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0771/">CVE-2013-0771</cve>
	<bugzilla href="https://bugzilla.suse.com/796895">SUSE bug 796895</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0772</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0772" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0772" ref_url="https://www.suse.com/security/cve/CVE-2013-0772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0772/">CVE-2013-0772</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0773</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0773" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0773" ref_url="https://www.suse.com/security/cve/CVE-2013-0773" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modifications to a prototype, which allows remote attackers to obtain sensitive information from chrome objects or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0773/">CVE-2013-0773</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0774</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0774" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0774" ref_url="https://www.suse.com/security/cve/CVE-2013-0774" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspecified impact and remote attack vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-27"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0774/">CVE-2013-0774</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0775</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0775" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0775" ref_url="https://www.suse.com/security/cve/CVE-2013-0775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via crafted web script.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0775/">CVE-2013-0775</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0776</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0776" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0776" ref_url="https://www.suse.com/security/cve/CVE-2013-0776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0776/">CVE-2013-0776</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0777</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0777" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0777" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0777" ref_url="https://www.suse.com/security/cve/CVE-2013-0777" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0777/">CVE-2013-0777</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0778</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0778" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0778" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0778" ref_url="https://www.suse.com/security/cve/CVE-2013-0778" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    The ClusterIterator::NextCluster function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0778/">CVE-2013-0778</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0779</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0779" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0779" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0779" ref_url="https://www.suse.com/security/cve/CVE-2013-0779" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    The nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0779/">CVE-2013-0779</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130780" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0780</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0780" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0780" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0780" ref_url="https://www.suse.com/security/cve/CVE-2013-0780" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document that uses Cascading Style Sheets (CSS) -moz-column-* properties.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0780/">CVE-2013-0780</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0781</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0781" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0781" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0781" ref_url="https://www.suse.com/security/cve/CVE-2013-0781" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0781/">CVE-2013-0781</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0782</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0782" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0782" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0782" ref_url="https://www.suse.com/security/cve/CVE-2013-0782" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0782/">CVE-2013-0782</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0783</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0783" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0783" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0783" ref_url="https://www.suse.com/security/cve/CVE-2013-0783" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0410-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0323-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0783/">CVE-2013-0783</cve>
	<bugzilla href="https://bugzilla.suse.com/804248">SUSE bug 804248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0787</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0787" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0787" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0787" ref_url="https://www.suse.com/security/cve/CVE-2013-0787" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0470-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0471-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0431-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0465-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0466-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0467-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0468-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0787/">CVE-2013-0787</cve>
	<bugzilla href="https://bugzilla.suse.com/808243">SUSE bug 808243</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0788</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0788" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0788" ref_url="https://www.suse.com/security/cve/CVE-2013-0788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-30"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0788/">CVE-2013-0788</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0789</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0789" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0789" ref_url="https://www.suse.com/security/cve/CVE-2013-0789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0 and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsContentUtils::HoldJSObjects function and the nsAutoPtr class, and other vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0789/">CVE-2013-0789</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0791</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0791" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0791" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0791" ref_url="https://www.suse.com/security/cve/CVE-2013-0791" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0791/">CVE-2013-0791</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116031" comment="mozilla-nss-devel-3.19.2.1-29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129306" comment="mozilla-nss-devel-3.21.1-46.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144970" comment="mozilla-nss-devel-3.16.4-5.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155345" comment="mozilla-nss-devel-3.29.5-57.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513857" comment="mozilla-nss-devel-3.29.5-58.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514218" comment="mozilla-nss-devel-3.45-58.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116020" comment="libfreebl3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116021" comment="libfreebl3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116024" comment="libsoftokn3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116025" comment="libsoftokn3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129313" comment="libfreebl3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129315" comment="libsoftokn3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143227" comment="libfreebl3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143228" comment="libfreebl3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143229" comment="libsoftokn3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143230" comment="libsoftokn3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155339" comment="libfreebl3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155342" comment="libfreebl3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155340" comment="libsoftokn3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155343" comment="libsoftokn3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513535" comment="libfreebl3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513536" comment="libfreebl3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513537" comment="libsoftokn3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513538" comment="libsoftokn3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513097" comment="libfreebl3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513098" comment="libfreebl3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513099" comment="libfreebl3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513100" comment="libfreebl3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513101" comment="libsoftokn3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513102" comment="libsoftokn3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513103" comment="libsoftokn3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513104" comment="libsoftokn3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513105" comment="mozilla-nss-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513106" comment="mozilla-nss-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513107" comment="mozilla-nss-certs-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513108" comment="mozilla-nss-certs-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513109" comment="mozilla-nss-sysinit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513110" comment="mozilla-nss-sysinit-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513111" comment="mozilla-nss-tools-3.45-58.31.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0792</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0792" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0792" ref_url="https://www.suse.com/security/cve/CVE-2013-0792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color_management.enablev4 is used, do not properly handle color profiles during PNG rendering, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a grayscale PNG image.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0792/">CVE-2013-0792</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0793</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0793" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0793" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0793" ref_url="https://www.suse.com/security/cve/CVE-2013-0793" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness of the address bar during history navigation, which allows remote attackers to conduct cross-site scripting (XSS) attacks or phishing attacks by leveraging control over navigation timing.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0793/">CVE-2013-0793</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0794</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0794" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0794" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0794" ref_url="https://www.suse.com/security/cve/CVE-2013-0794" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0794/">CVE-2013-0794</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0795</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0795" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0795" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0795" ref_url="https://www.suse.com/security/cve/CVE-2013-0795" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0795/">CVE-2013-0795</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0796</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0796" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0796" ref_url="https://www.suse.com/security/cve/CVE-2013-0796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0796/">CVE-2013-0796</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0800</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0800" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0800" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0800" ref_url="https://www.suse.com/security/cve/CVE-2013-0800" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0645-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0842-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0843-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0631-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0875-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-12"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0800/">CVE-2013-0800</cve>
	<bugzilla href="https://bugzilla.suse.com/813026">SUSE bug 813026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0801</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0801" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0801" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0801" ref_url="https://www.suse.com/security/cve/CVE-2013-0801" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0801/">CVE-2013-0801</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0809</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0809" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0809" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0809" ref_url="https://www.suse.com/security/cve/CVE-2013-0809" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0509-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00078.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-1493.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0809/">CVE-2013-0809</cve>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807487">SUSE bug 807487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809386">SUSE bug 809386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/813939">SUSE bug 813939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0871</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0871" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0871" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0871" ref_url="https://www.suse.com/security/cve/CVE-2013-0871" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0341-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0674-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0396-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0927-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00064.html" source="SUSE-SU"/>
    <description>
    Race condition in the ptrace functionality in the Linux kernel before 3.7.5 allows local users to gain privileges via a PTRACE_SETREGS ptrace system call in a crafted application, as demonstrated by ptrace_death.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-0871/">CVE-2013-0871</cve>
	<bugzilla href="https://bugzilla.suse.com/804154">SUSE bug 804154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804227">SUSE bug 804227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/841063">SUSE bug 841063</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0913</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0913" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0913" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0913" ref_url="https://www.suse.com/security/cve/CVE-2013-0913" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-0913/">CVE-2013-0913</cve>
	<bugzilla href="https://bugzilla.suse.com/808829">SUSE bug 808829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140698" comment="kernel-default-man-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140696" comment="kernel-default-base-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140695" comment="kernel-default-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140697" comment="kernel-default-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142128" comment="kernel-default-extra-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140699" comment="kernel-devel-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140700" comment="kernel-macros-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140701" comment="kernel-source-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140702" comment="kernel-syms-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141425" comment="kernel-default-extra-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141423" comment="kernel-default-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143213" comment="kernel-default-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141424" comment="kernel-default-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143214" comment="kernel-default-man-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141426" comment="kernel-devel-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141427" comment="kernel-macros-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141428" comment="kernel-source-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141429" comment="kernel-syms-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141430" comment="kernel-xen-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143215" comment="kernel-xen-base-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141431" comment="kernel-xen-devel-3.12.28-4.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141893" comment="kernel-default-extra-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141891" comment="kernel-default-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143417" comment="kernel-default-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141892" comment="kernel-default-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143352" comment="kernel-default-man-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141894" comment="kernel-devel-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141895" comment="kernel-macros-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141896" comment="kernel-source-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141897" comment="kernel-syms-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141898" comment="kernel-xen-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143357" comment="kernel-xen-base-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141899" comment="kernel-xen-devel-3.12.49-11.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144783" comment="kernel-docs-3.12.28-4.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144784" comment="kernel-obs-build-3.12.28-4.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144785" comment="kernel-zfcpdump-3.12.28-4.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145248" comment="kernel-docs-4.4.21-69.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145249" comment="kernel-obs-build-4.4.21-69.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145392" comment="kernel-docs-3.12.49-11.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145393" comment="kernel-obs-build-3.12.49-11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159036" comment="kernel-default-base-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159038" comment="kernel-default-man-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159035" comment="kernel-default-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159037" comment="kernel-default-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159648" comment="kernel-default-extra-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159039" comment="kernel-devel-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159040" comment="kernel-macros-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159041" comment="kernel-source-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159042" comment="kernel-syms-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159764" comment="kernel-docs-4.4.73-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159765" comment="kernel-obs-build-4.4.73-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512199" comment="kernel-default-extra-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512197" comment="kernel-default-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513525" comment="kernel-default-base-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512198" comment="kernel-default-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513526" comment="kernel-default-man-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512200" comment="kernel-devel-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512201" comment="kernel-macros-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512202" comment="kernel-source-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512203" comment="kernel-syms-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513681" comment="kernel-docs-4.12.14-94.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513682" comment="kernel-obs-build-4.12.14-94.41.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0914</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-0914" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0914" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-0914" ref_url="https://www.suse.com/security/cve/CVE-2013-0914" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0914/">CVE-2013-0914</cve>
	<bugzilla href="https://bugzilla.suse.com/808827">SUSE bug 808827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1365</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1365" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1365" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1365" ref_url="https://www.suse.com/security/cve/CVE-2013-1365" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1365/">CVE-2013-1365</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1366</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1366" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1366" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1366" ref_url="https://www.suse.com/security/cve/CVE-2013-1366" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1366/">CVE-2013-1366</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1367</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1367" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1367" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1367" ref_url="https://www.suse.com/security/cve/CVE-2013-1367" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1367/">CVE-2013-1367</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1368</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1368" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1368" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1368" ref_url="https://www.suse.com/security/cve/CVE-2013-1368" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1368/">CVE-2013-1368</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1369</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1369" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1369" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1369" ref_url="https://www.suse.com/security/cve/CVE-2013-1369" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1369/">CVE-2013-1369</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1370</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1370" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1370" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1370" ref_url="https://www.suse.com/security/cve/CVE-2013-1370" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1372, and CVE-2013-1373.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1370/">CVE-2013-1370</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1371</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1371" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1371" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1371" ref_url="https://www.suse.com/security/cve/CVE-2013-1371" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK &amp; Compiler before 3.6.0.6090 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1371/">CVE-2013-1371</cve>
	<bugzilla href="https://bugzilla.suse.com/808973">SUSE bug 808973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1372</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1372" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1372" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1372" ref_url="https://www.suse.com/security/cve/CVE-2013-1372" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, and CVE-2013-1373.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1372/">CVE-2013-1372</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1373</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1373" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1373" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1373" ref_url="https://www.suse.com/security/cve/CVE-2013-1373" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, and CVE-2013-1372.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1373/">CVE-2013-1373</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1374</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1374" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1374" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1374" ref_url="https://www.suse.com/security/cve/CVE-2013-1374" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0296-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0295-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0298-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-0649.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1374/">CVE-2013-1374</cve>
	<bugzilla href="https://bugzilla.suse.com/803485">SUSE bug 803485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1375</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1375" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1375" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1375" ref_url="https://www.suse.com/security/cve/CVE-2013-1375" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0458-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0459-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0464-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK &amp; Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1375/">CVE-2013-1375</cve>
	<bugzilla href="https://bugzilla.suse.com/808973">SUSE bug 808973</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1378</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1378" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1378" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1378" ref_url="https://www.suse.com/security/cve/CVE-2013-1378" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0670-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0670-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0672-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK &amp; Compiler before 3.7.0.1530 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1380.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1378/">CVE-2013-1378</cve>
	<bugzilla href="https://bugzilla.suse.com/814635">SUSE bug 814635</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1379</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1379" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1379" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1379" ref_url="https://www.suse.com/security/cve/CVE-2013-1379" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0670-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0670-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0672-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK &amp; Compiler before 3.7.0.1530 do not properly initialize pointer arrays, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1379/">CVE-2013-1379</cve>
	<bugzilla href="https://bugzilla.suse.com/814635">SUSE bug 814635</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1380</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1380" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1380" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1380" ref_url="https://www.suse.com/security/cve/CVE-2013-1380" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0670-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0670-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0672-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00081.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0675-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00019.html" source="SUSE-SU"/>
    <description>
    Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK &amp; Compiler before 3.7.0.1530 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1378.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1380/">CVE-2013-1380</cve>
	<bugzilla href="https://bugzilla.suse.com/814635">SUSE bug 814635</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116120" comment="flash-player-11.2.202.548-111.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116121" comment="flash-player-gnome-11.2.202.548-111.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141340" comment="flash-player-11.2.202.406-1.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141341" comment="flash-player-gnome-11.2.202.406-1.3 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1415</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1415" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1415" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1415" ref_url="https://www.suse.com/security/cve/CVE-2013-1415" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00069.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0523-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00090.html" source="SUSE-SU"/>
    <description>
    The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during extraction of fields from an X.509 certificate, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed KRB5_PADATA_PK_AS_REQ AS-REQ request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1415/">CVE-2013-1415</cve>
	<bugzilla href="https://bugzilla.suse.com/806715">SUSE bug 806715</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1416</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1416" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1416" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1416" ref_url="https://www.suse.com/security/cve/CVE-2013-1416" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0746-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0904-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0967-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00102.html" source="SUSE-SU"/>
    <description>
    The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS-REQ request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1416/">CVE-2013-1416</cve>
	<bugzilla href="https://bugzilla.suse.com/770172">SUSE bug 770172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/816413">SUSE bug 816413</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334930" comment="krb5-devel is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333953" comment="krb5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334923" comment="krb5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334924" comment="krb5-client is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334925" comment="krb5-doc is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334926" comment="krb5-plugin-kdb-ldap is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334927" comment="krb5-plugin-preauth-otp is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334928" comment="krb5-plugin-preauth-pkinit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334929" comment="krb5-server is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333953" comment="krb5 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334923" comment="krb5-32bit is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334924" comment="krb5-client is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1417</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1417" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1417" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1417" ref_url="https://www.suse.com/security/cve/CVE-2013-1417" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00026.html" source="SUSE-SU"/>
    <description>
    do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-02"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1417/">CVE-2013-1417</cve>
	<bugzilla href="https://bugzilla.suse.com/850660">SUSE bug 850660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/879587">SUSE bug 879587</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1418</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1418" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1418" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1418" ref_url="https://www.suse.com/security/cve/CVE-2013-1418" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1875-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000664.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1738-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00082.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1751-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00086.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1833-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00026.html" source="SUSE-SU"/>
    <description>
    The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple realms are configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1418/">CVE-2013-1418</cve>
	<bugzilla href="https://bugzilla.suse.com/849240">SUSE bug 849240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/866059">SUSE bug 866059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/879587">SUSE bug 879587</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115944" comment="krb5-devel-1.12.1-19.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144786" comment="krb5-devel-1.12.1-6.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145250" comment="krb5-devel-1.12.5-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513683" comment="krb5-devel-1.12.5-40.28.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514008" comment="krb5-devel-1.12.5-40.37.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115946" comment="krb5-doc-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115947" comment="krb5-plugin-kdb-ldap-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115948" comment="krb5-plugin-preauth-otp-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115949" comment="krb5-plugin-preauth-pkinit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115950" comment="krb5-server-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115941" comment="krb5-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115942" comment="krb5-32bit-1.12.1-19.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115943" comment="krb5-client-1.12.1-19.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140704" comment="krb5-32bit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140703" comment="krb5-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140705" comment="krb5-client-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140706" comment="krb5-doc-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140707" comment="krb5-plugin-kdb-ldap-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140708" comment="krb5-plugin-preauth-otp-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140709" comment="krb5-plugin-preauth-pkinit-1.12.5-39.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140710" comment="krb5-server-1.12.5-39.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143216" comment="krb5-doc-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143217" comment="krb5-plugin-kdb-ldap-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143218" comment="krb5-plugin-preauth-otp-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143219" comment="krb5-plugin-preauth-pkinit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143220" comment="krb5-server-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141432" comment="krb5-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141433" comment="krb5-32bit-1.12.1-6.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141434" comment="krb5-client-1.12.1-6.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513527" comment="krb5-doc-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513528" comment="krb5-plugin-kdb-ldap-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513529" comment="krb5-plugin-preauth-otp-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513530" comment="krb5-plugin-preauth-pkinit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513531" comment="krb5-server-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512206" comment="krb5-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512207" comment="krb5-32bit-1.12.5-40.28.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512208" comment="krb5-client-1.12.5-40.28.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512983" comment="krb5-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512984" comment="krb5-32bit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512985" comment="krb5-client-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512986" comment="krb5-doc-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512987" comment="krb5-plugin-kdb-ldap-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512988" comment="krb5-plugin-preauth-otp-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512989" comment="krb5-plugin-preauth-pkinit-1.12.5-40.37.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512990" comment="krb5-server-1.12.5-40.37.7 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1430</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1430" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1430" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1430" ref_url="https://www.suse.com/security/cve/CVE-2013-1430" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2019:1847-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005708.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2019:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005721.html" source="SUSE-SU"/>
    <description>
    An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-25"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2013-1430/">CVE-2013-1430</cve>
	<bugzilla href="https://bugzilla.suse.com/1015567">SUSE bug 1015567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/442182">SUSE bug 442182</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513454" comment="xrdp-0.9.10-1.35 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009521959" comment="xrdp-0.9.0~git.1456906198.f422461-21.9.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009536998" comment="xrdp-0.9.0~git.1456906198.f422461-16.9.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009551188" comment="xrdp-0.9.0~git.1456906198.f422461-16.9.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009558037" comment="xrdp-0.9.0~git.1456906198.f422461-21.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1431</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1431" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1431" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1431" ref_url="https://www.suse.com/security/cve/CVE-2013-1431" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1013-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00143.html" source="SUSE-SU"/>
    <description>
    The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1431/">CVE-2013-1431</cve>
	<bugzilla href="https://bugzilla.suse.com/822586">SUSE bug 822586</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141814" comment="telepathy-gabble-0.18.1-3.268 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142152" comment="telepathy-gabble-0.18.3-5.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1438</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1438" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1438" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1438" ref_url="https://www.suse.com/security/cve/CVE-2013-1438" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a (1) divide-by-zero, (2) infinite loop, or (3) NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1438/">CVE-2013-1438</cve>
	<bugzilla href="https://bugzilla.suse.com/837750">SUSE bug 837750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009476559" comment="libraw1394-11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009476560" comment="libraw1394-11-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1439</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1439" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1439" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1439" ref_url="https://www.suse.com/security/cve/CVE-2013-1439" source="SUSE CVE"/>
    <description>
    The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-11-26"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1439/">CVE-2013-1439</cve>
	<bugzilla href="https://bugzilla.suse.com/837750">SUSE bug 837750</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009476559" comment="libraw1394-11 is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009476560" comment="libraw1394-11-32bit is not affected"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1442</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1442" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1442" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1442" ref_url="https://www.suse.com/security/cve/CVE-2013-1442" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000643.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-November/000651.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0446-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1636-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1953-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00115.html" source="SUSE-SU"/>
    <description>
    Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain sensitive information by reading the registers.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1442/">CVE-2013-1442</cve>
	<bugzilla href="https://bugzilla.suse.com/839596">SUSE bug 839596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/840592">SUSE bug 840592</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145001" comment="xen-devel-4.4.1_06-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145189" comment="xen-devel-4.5.1_12-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145372" comment="xen-devel-4.7.0_12-23.4 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159841" comment="xen-devel-4.9.0_08-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513888" comment="xen-devel-4.11.0_08-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514257" comment="xen-devel-4.12.1_06-1.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141160" comment="xen-doc-html-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141163" comment="xen-tools-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141164" comment="xen-tools-domU-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141159" comment="xen-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141161" comment="xen-libs-4.7.0_12-23.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141162" comment="xen-libs-32bit-4.7.0_12-23.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141829" comment="xen-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143312" comment="xen-doc-html-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141830" comment="xen-kmp-default-4.4.1_06_k3.12.28_4-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141831" comment="xen-libs-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141832" comment="xen-libs-32bit-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143313" comment="xen-tools-4.4.1_06-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143314" comment="xen-tools-domU-4.4.1_06-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142064" comment="xen-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143410" comment="xen-doc-html-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142065" comment="xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142066" comment="xen-libs-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142067" comment="xen-libs-32bit-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143411" comment="xen-tools-4.5.1_12-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143412" comment="xen-tools-domU-4.5.1_12-2.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159318" comment="xen-doc-html-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159321" comment="xen-tools-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159322" comment="xen-tools-domU-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159317" comment="xen-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159319" comment="xen-libs-4.9.0_08-2.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159320" comment="xen-libs-32bit-4.9.0_08-2.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512629" comment="xen-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513606" comment="xen-doc-html-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512630" comment="xen-libs-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512631" comment="xen-libs-32bit-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513607" comment="xen-tools-4.11.0_08-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513608" comment="xen-tools-domU-4.11.0_08-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513445" comment="xen-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513446" comment="xen-doc-html-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513447" comment="xen-libs-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513448" comment="xen-libs-32bit-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513449" comment="xen-tools-4.12.1_06-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513450" comment="xen-tools-domU-4.12.1_06-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1445</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Public Cloud 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1445" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1445" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1445" ref_url="https://www.suse.com/security/cve/CVE-2013-1445" source="SUSE CVE"/>
    <description>
    The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a child process is created and accesses the PRNG within the same rate-limit period as another process.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1445/">CVE-2013-1445</cve>
	<bugzilla href="https://bugzilla.suse.com/846214">SUSE bug 846214</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-public-cloud:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178199" comment="SUSE Linux Enterprise Module for Public Cloud 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144245" comment="python-pycrypto-2.6.1-1.18 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1473</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1473" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1473" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1473" ref_url="https://www.suse.com/security/cve/CVE-2013-1473" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-22"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1473/">CVE-2013-1473</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1475</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1475" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1475" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1475" ref_url="https://www.suse.com/security/cve/CVE-2013-1475" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "IIOP type reuse management" in ObjectStreamClass.java.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1475/">CVE-2013-1475</cve>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1476</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1476" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1476" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1476" ref_url="https://www.suse.com/security/cve/CVE-2013-1476" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0308-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0312-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-0441 and CVE-2013-1475.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via "certain value handler constructors."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1476/">CVE-2013-1476</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1478</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1478" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1478" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1478" ref_url="https://www.suse.com/security/cve/CVE-2013-1478" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" that can trigger an integer overflow and memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1478/">CVE-2013-1478</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1480</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1480" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1480" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1480" ref_url="https://www.suse.com/security/cve/CVE-2013-1480" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0377-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" in awt_parseImage.c, which triggers memory corruption.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1480/">CVE-2013-1480</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/801972">SUSE bug 801972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1481</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1481" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1481" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1481" ref_url="https://www.suse.com/security/cve/CVE-2013-1481" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1481/">CVE-2013-1481</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1484</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1484" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1484" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1484" ref_url="https://www.suse.com/security/cve/CVE-2013-1484" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1484/">CVE-2013-1484</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1485</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1485" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1485" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1485" ref_url="https://www.suse.com/security/cve/CVE-2013-1485" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1485/">CVE-2013-1485</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1486</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1486" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1486" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1486" ref_url="https://www.suse.com/security/cve/CVE-2013-1486" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0375-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0378-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1486/">CVE-2013-1486</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/803379">SUSE bug 803379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804654">SUSE bug 804654</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1487</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1487" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1487" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1487" ref_url="https://www.suse.com/security/cve/CVE-2013-1487" source="SUSE CVE"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7 Update 13 and earlier and 6 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-12"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1487/">CVE-2013-1487</cve>
	<bugzilla href="https://bugzilla.suse.com/798535">SUSE bug 798535</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1488</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1488" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1488" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1488" ref_url="https://www.suse.com/security/cve/CVE-2013-1488" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0745-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0777-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0964-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0993-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00129.html" source="SUSE-SU"/>
    <description>
    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1488/">CVE-2013-1488</cve>
	<bugzilla href="https://bugzilla.suse.com/816720">SUSE bug 816720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817157">SUSE bug 817157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819288">SUSE bug 819288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333987" comment="java-1_7_0-openjdk is affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333987" comment="java-1_7_0-openjdk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335518" comment="java-1_7_0-openjdk-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335519" comment="java-1_7_0-openjdk-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335209" comment="java-1_7_0-openjdk-headless is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1491</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1491" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1491" ref_url="https://www.suse.com/security/cve/CVE-2013-1491" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0934-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html" source="SUSE-SU"/>
    <description>
    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-11"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1491/">CVE-2013-1491</cve>
	<bugzilla href="https://bugzilla.suse.com/819288">SUSE bug 819288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1493</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1493" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1493" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1493" ref_url="https://www.suse.com/security/cve/CVE-2013-1493" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0434-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0430-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0438-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0509-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00078.html" source="SUSE-SU"/>
    <description>
    The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1493/">CVE-2013-1493</cve>
	<bugzilla href="https://bugzilla.suse.com/806786">SUSE bug 806786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807487">SUSE bug 807487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809386">SUSE bug 809386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/813939">SUSE bug 813939</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1500</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1500" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1500" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1500" ref_url="https://www.suse.com/security/cve/CVE-2013-1500" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1255-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1255-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1263-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1264-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1500/">CVE-2013-1500</cve>
	<bugzilla href="https://bugzilla.suse.com/825624">SUSE bug 825624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/828665">SUSE bug 828665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/829212">SUSE bug 829212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/829708">SUSE bug 829708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1518</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1518" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1518" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1518" ref_url="https://www.suse.com/security/cve/CVE-2013-1518" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0745-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0777-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0964-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0993-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00129.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1518/">CVE-2013-1518</cve>
	<bugzilla href="https://bugzilla.suse.com/816720">SUSE bug 816720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817157">SUSE bug 817157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819288">SUSE bug 819288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1537</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1537" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1537" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1537" ref_url="https://www.suse.com/security/cve/CVE-2013-1537" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0934-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0745-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0777-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0964-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0993-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00129.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-05"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1537/">CVE-2013-1537</cve>
	<bugzilla href="https://bugzilla.suse.com/816720">SUSE bug 816720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817157">SUSE bug 817157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819288">SUSE bug 819288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1540</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1540" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1540" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1540" ref_url="https://www.suse.com/security/cve/CVE-2013-1540" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1540/">CVE-2013-1540</cve>
	<bugzilla href="https://bugzilla.suse.com/819288">SUSE bug 819288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1557</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1557" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1557" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1557" ref_url="https://www.suse.com/security/cve/CVE-2013-1557" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0934-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0745-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0777-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0964-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0993-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00129.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1557/">CVE-2013-1557</cve>
	<bugzilla href="https://bugzilla.suse.com/816720">SUSE bug 816720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817157">SUSE bug 817157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819288">SUSE bug 819288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1563</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1563" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1563" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1563" ref_url="https://www.suse.com/security/cve/CVE-2013-1563" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00002.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-12"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1563/">CVE-2013-1563</cve>
	<bugzilla href="https://bugzilla.suse.com/819288">SUSE bug 819288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1569</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1569" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1569" ref_url="https://www.suse.com/security/cve/CVE-2013-1569" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0814-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0835-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0871-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0934-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0745-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0777-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0964-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0993-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00129.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1569/">CVE-2013-1569</cve>
	<bugzilla href="https://bugzilla.suse.com/816720">SUSE bug 816720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817157">SUSE bug 817157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819288">SUSE bug 819288</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333987" comment="java-1_7_0-openjdk is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335518" comment="java-1_7_0-openjdk-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335519" comment="java-1_7_0-openjdk-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335209" comment="java-1_7_0-openjdk-headless is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334103" comment="java-1_7_1-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336013" comment="java-1_7_1-ibm-alsa is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336388" comment="java-1_7_1-ibm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336012" comment="java-1_7_1-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336014" comment="java-1_7_1-ibm-plugin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334104" comment="java-1_8_0-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336015" comment="java-1_8_0-ibm-alsa is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336389" comment="java-1_8_0-ibm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336016" comment="java-1_8_0-ibm-plugin is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334103" comment="java-1_7_1-ibm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336013" comment="java-1_7_1-ibm-alsa is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336388" comment="java-1_7_1-ibm-devel is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336012" comment="java-1_7_1-ibm-jdbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336014" comment="java-1_7_1-ibm-plugin is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1571</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Module for Legacy 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1571" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1571" ref_url="https://www.suse.com/security/cve/CVE-2013-1571" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1238-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00024.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1254-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00025.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1255-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1255-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1255-3" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1257-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1263-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1263-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00032.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1305-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="TID7021300" ref_url="https://www.suse.com/support/kb/doc/?id=7021300" source="SUSE-SU"/>
		<reference ref_id="TID7021433" ref_url="https://www.suse.com/support/kb/doc/?id=7021433" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1247-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00078.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1288-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00001.html" source="SUSE-SU"/>
    <description>
    Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1571/">CVE-2013-1571</cve>
	<bugzilla href="https://bugzilla.suse.com/824397">SUSE bug 824397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/825624">SUSE bug 825624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/828665">SUSE bug 828665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/829212">SUSE bug 829212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/829708">SUSE bug 829708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334125" comment="java-1_7_0-openjdk is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140447" comment="ant-1.9.4-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130960" comment="java-1_7_0-openjdk-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131900" comment="java-1_7_0-openjdk-demo-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131901" comment="java-1_7_0-openjdk-devel-1.7.0.111-33.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130961" comment="java-1_7_0-openjdk-headless-1.7.0.111-33.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140447" comment="ant-1.9.4-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143208" comment="java-1_7_0-openjdk-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143209" comment="java-1_7_0-openjdk-demo-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143210" comment="java-1_7_0-openjdk-devel-1.7.0.6-33.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143211" comment="java-1_7_0-openjdk-headless-1.7.0.6-33.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140447" comment="ant-1.9.4-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145010" comment="ant-jmf-1.9.4-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145011" comment="ant-scripts-1.9.4-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145012" comment="ant-swing-1.9.4-1.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140447" comment="ant-1.9.4-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155977" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155978" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141419" comment="java-1_7_0-openjdk-1.7.0.65-3.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141420" comment="java-1_7_0-openjdk-headless-1.7.0.65-3.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144710" comment="ant-jmf-1.9.4-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144711" comment="ant-scripts-1.9.4-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144712" comment="ant-swing-1.9.4-1.31 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117869" comment="SUSE Linux Enterprise Module for Legacy 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009147505" comment="java-1_6_0-ibm-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147506" comment="java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147507" comment="java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147508" comment="java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149933" comment="ant-1.9.4-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115439" comment="java-1_7_0-openjdk-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115441" comment="java-1_7_0-openjdk-demo-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115442" comment="java-1_7_0-openjdk-devel-1.7.0.91-21.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009115443" comment="java-1_7_0-openjdk-headless-1.7.0.91-21.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009149933" comment="ant-1.9.4-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144710" comment="ant-jmf-1.9.4-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144711" comment="ant-scripts-1.9.4-1.31 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144712" comment="ant-swing-1.9.4-1.31 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155970" comment="java-1_7_0-openjdk-1.7.0.141-42.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155971" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334125" comment="java-1_7_0-openjdk is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336114" comment="java-1_7_0-openjdk-demo is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336115" comment="java-1_7_0-openjdk-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336113" comment="java-1_7_0-openjdk-headless is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512682" comment="ant-1.9.4-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512190" comment="java-1_7_0-openjdk-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513514" comment="java-1_7_0-openjdk-demo-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513515" comment="java-1_7_0-openjdk-devel-1.7.0.181-43.15.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512191" comment="java-1_7_0-openjdk-headless-1.7.0.181-43.15.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512682" comment="ant-1.9.4-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512959" comment="java-1_7_0-openjdk-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512960" comment="java-1_7_0-openjdk-demo-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512961" comment="java-1_7_0-openjdk-devel-1.7.0.231-43.27.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512962" comment="java-1_7_0-openjdk-headless-1.7.0.231-43.27.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512682" comment="ant-1.9.4-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513625" comment="ant-jmf-1.9.4-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513626" comment="ant-scripts-1.9.4-3.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513627" comment="ant-swing-1.9.4-3.3.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1572</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1572" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1572" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1572" ref_url="https://www.suse.com/security/cve/CVE-2013-1572" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3 Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1572/">CVE-2013-1572</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1573</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1573" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1573" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1573" ref_url="https://www.suse.com/security/cve/CVE-2013-1573" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1573/">CVE-2013-1573</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1574</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1574" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1574" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1574" ref_url="https://www.suse.com/security/cve/CVE-2013-1574" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1574/">CVE-2013-1574</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1575</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1575" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1575" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1575" ref_url="https://www.suse.com/security/cve/CVE-2013-1575" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1575/">CVE-2013-1575</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1576</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1576" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1576" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1576" ref_url="https://www.suse.com/security/cve/CVE-2013-1576" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1576/">CVE-2013-1576</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1577</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1577" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1577" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1577" ref_url="https://www.suse.com/security/cve/CVE-2013-1577" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_sip_p_charging_func_addresses function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle offset data associated with a quoted string, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1577/">CVE-2013-1577</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1578</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1578" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1578" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1578" ref_url="https://www.suse.com/security/cve/CVE-2013-1578" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_pw_eth_heuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service (loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1578/">CVE-2013-1578</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1579</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1579" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1579" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1579" ref_url="https://www.suse.com/security/cve/CVE-2013-1579" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The rtps_util_add_bitmap function in epan/dissectors/packet-rtps.c in the RTPS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly implement certain nested loops for processing bitmap data, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1579/">CVE-2013-1579</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1580</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1580" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1580" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1580" ref_url="https://www.suse.com/security/cve/CVE-2013-1580" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1580/">CVE-2013-1580</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1581</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1581" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1581" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1581" ref_url="https://www.suse.com/security/cve/CVE-2013-1581" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1581/">CVE-2013-1581</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131582" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1582</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1582" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1582" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1582" ref_url="https://www.suse.com/security/cve/CVE-2013-1582" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1582/">CVE-2013-1582</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1583</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1583" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1583" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1583" ref_url="https://www.suse.com/security/cve/CVE-2013-1583" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1583/">CVE-2013-1583</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1584</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1584" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1584" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1584" ref_url="https://www.suse.com/security/cve/CVE-2013-1584" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1584/">CVE-2013-1584</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1585</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1585" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1585" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1585" ref_url="https://www.suse.com/security/cve/CVE-2013-1585" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1585/">CVE-2013-1585</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1586</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1586" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1586" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1586" ref_url="https://www.suse.com/security/cve/CVE-2013-1586" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1586/">CVE-2013-1586</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1587</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1587" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1587" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1587" ref_url="https://www.suse.com/security/cve/CVE-2013-1587" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    The dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1587/">CVE-2013-1587</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1588</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1588" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1588" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1588" ref_url="https://www.suse.com/security/cve/CVE-2013-1588" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    Multiple buffer overflows in the dissect_pft_fec_detailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1588/">CVE-2013-1588</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1589</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1589" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1589" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1589" ref_url="https://www.suse.com/security/cve/CVE-2013-1589" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1589/">CVE-2013-1589</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1590</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1590" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1590" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1590" ref_url="https://www.suse.com/security/cve/CVE-2013-1590" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0276-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00028.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0285-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-02/msg00037.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1590/">CVE-2013-1590</cve>
	<bugzilla href="https://bugzilla.suse.com/801131">SUSE bug 801131</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114951" comment="wireshark-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114952" comment="wireshark-devel-1.12.7-15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131146" comment="wireshark-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131810" comment="wireshark-devel-1.12.13-31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141827" comment="wireshark-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143311" comment="wireshark-1.10.9-1.5 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144998" comment="wireshark-devel-1.10.9-1.11 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157332" comment="wireshark-devel-2.2.7-47.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513887" comment="wireshark-devel-2.4.9-48.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514256" comment="wireshark-devel-2.4.16-48.51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157263" comment="libwireshark8-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157264" comment="libwiretap6-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157265" comment="libwscodecs1-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157266" comment="libwsutil7-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157267" comment="wireshark-2.2.7-47.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157268" comment="wireshark-gtk-2.2.7-47.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512530" comment="libwireshark9-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512531" comment="libwiretap7-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512532" comment="libwscodecs1-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512533" comment="libwsutil8-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512534" comment="wireshark-2.4.9-48.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512535" comment="wireshark-gtk-2.4.9-48.29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513300" comment="libwireshark9-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513301" comment="libwiretap7-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513302" comment="libwscodecs1-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513303" comment="libwsutil8-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513304" comment="wireshark-2.4.16-48.51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513305" comment="wireshark-gtk-2.4.16-48.51.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1620</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1620" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1620" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1620" ref_url="https://www.suse.com/security/cve/CVE-2013-1620" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0630-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html" source="SUSE-SU"/>
    <description>
    The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1620/">CVE-2013-1620</cve>
	<bugzilla href="https://bugzilla.suse.com/802184">SUSE bug 802184</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116031" comment="mozilla-nss-devel-3.19.2.1-29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129306" comment="mozilla-nss-devel-3.21.1-46.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144970" comment="mozilla-nss-devel-3.16.4-5.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155345" comment="mozilla-nss-devel-3.29.5-57.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513857" comment="mozilla-nss-devel-3.29.5-58.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514218" comment="mozilla-nss-devel-3.45-58.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116020" comment="libfreebl3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116021" comment="libfreebl3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116024" comment="libsoftokn3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116025" comment="libsoftokn3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129313" comment="libfreebl3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129315" comment="libsoftokn3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143227" comment="libfreebl3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143228" comment="libfreebl3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143229" comment="libsoftokn3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143230" comment="libsoftokn3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155339" comment="libfreebl3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155342" comment="libfreebl3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155340" comment="libsoftokn3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155343" comment="libsoftokn3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513535" comment="libfreebl3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513536" comment="libfreebl3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513537" comment="libsoftokn3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513538" comment="libsoftokn3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513097" comment="libfreebl3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513098" comment="libfreebl3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513099" comment="libfreebl3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513100" comment="libfreebl3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513101" comment="libsoftokn3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513102" comment="libsoftokn3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513103" comment="libsoftokn3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513104" comment="libsoftokn3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513105" comment="mozilla-nss-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513106" comment="mozilla-nss-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513107" comment="mozilla-nss-certs-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513108" comment="mozilla-nss-certs-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513109" comment="mozilla-nss-sysinit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513110" comment="mozilla-nss-sysinit-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513111" comment="mozilla-nss-tools-3.45-58.31.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1635</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1635" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1635" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1635" ref_url="https://www.suse.com/security/cve/CVE-2013-1635" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1285-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1244-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00080.html" source="SUSE-SU"/>
    <description>
    ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1635/">CVE-2013-1635</cve>
	<bugzilla href="https://bugzilla.suse.com/807707">SUSE bug 807707</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1643</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1643" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1643" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1643" ref_url="https://www.suse.com/security/cve/CVE-2013-1643" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1285-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1285-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1317-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00009.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1351-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1244-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00075.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1249-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00080.html" source="SUSE-SU"/>
    <description>
    The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1643/">CVE-2013-1643</cve>
	<bugzilla href="https://bugzilla.suse.com/807707">SUSE bug 807707</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1667</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1667" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1667" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1667" ref_url="https://www.suse.com/security/cve/CVE-2013-1667" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0441-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0442-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00037.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0502-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00038.html" source="SUSE-SU"/>
    <description>
    The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1667/">CVE-2013-1667</cve>
	<bugzilla href="https://bugzilla.suse.com/804415">SUSE bug 804415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/854385">SUSE bug 854385</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140460" comment="apache2-mod_perl-2.0.8-11.43 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143132" comment="apache2-mod_perl-2.0.8-8.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159743" comment="apache2-mod_perl-devel-2.0.8-11.43 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1669</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1669" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1669" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1669" ref_url="https://www.suse.com/security/cve/CVE-2013-1669" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1669/">CVE-2013-1669</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1670</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1670" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1670" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1670" ref_url="https://www.suse.com/security/cve/CVE-2013-1670" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1670/">CVE-2013-1670</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1671</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1671" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1671" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1671" ref_url="https://www.suse.com/security/cve/CVE-2013-1671" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1671/">CVE-2013-1671</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1674</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1674" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1674" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1674" ref_url="https://www.suse.com/security/cve/CVE-2013-1674" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1674/">CVE-2013-1674</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1675</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1675" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1675" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1675" ref_url="https://www.suse.com/security/cve/CVE-2013-1675" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1675/">CVE-2013-1675</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1676</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1676" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1676" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1676" ref_url="https://www.suse.com/security/cve/CVE-2013-1676" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-04-03"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1676/">CVE-2013-1676</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1677</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1677" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1677" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1677" ref_url="https://www.suse.com/security/cve/CVE-2013-1677" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1677/">CVE-2013-1677</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1678</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1678" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1678" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1678" ref_url="https://www.suse.com/security/cve/CVE-2013-1678" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1678/">CVE-2013-1678</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1679</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1679" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1679" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1679" ref_url="https://www.suse.com/security/cve/CVE-2013-1679" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1679/">CVE-2013-1679</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1680</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1680" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1680" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1680" ref_url="https://www.suse.com/security/cve/CVE-2013-1680" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1680/">CVE-2013-1680</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1681</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1681" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1681" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1681" ref_url="https://www.suse.com/security/cve/CVE-2013-1681" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0825-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0831-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0834-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0894-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0896-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00033.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0929-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0946-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1681/">CVE-2013-1681</cve>
	<bugzilla href="https://bugzilla.suse.com/819204">SUSE bug 819204</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1682</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1682" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1682" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1682" ref_url="https://www.suse.com/security/cve/CVE-2013-1682" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1682/">CVE-2013-1682</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1683</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1683" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1683" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1683" ref_url="https://www.suse.com/security/cve/CVE-2013-1683" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1683/">CVE-2013-1683</cve>
	<bugzilla href="https://bugzilla.suse.com/1150035">SUSE bug 1150035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009333936" comment="MozillaFirefox is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334818" comment="MozillaFirefox-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334817" comment="MozillaFirefox-translations-common is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1684</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1684" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1684" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1684" ref_url="https://www.suse.com/security/cve/CVE-2013-1684" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1684/">CVE-2013-1684</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1685</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1685" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1685" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1685" ref_url="https://www.suse.com/security/cve/CVE-2013-1685" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1685/">CVE-2013-1685</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1686</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1686" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1686" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1686" ref_url="https://www.suse.com/security/cve/CVE-2013-1686" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1686/">CVE-2013-1686</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1687</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1687" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1687" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1687" ref_url="https://www.suse.com/security/cve/CVE-2013-1687" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly restrict XBL user-defined functions, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges, or conduct cross-site scripting (XSS) attacks, via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1687/">CVE-2013-1687</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1688</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1688" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1688" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1688" ref_url="https://www.suse.com/security/cve/CVE-2013-1688" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1688/">CVE-2013-1688</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1690</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1690" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1690" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1690" ref_url="https://www.suse.com/security/cve/CVE-2013-1690" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1690/">CVE-2013-1690</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1692</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1692" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1692" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1692" ref_url="https://www.suse.com/security/cve/CVE-2013-1692" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1692/">CVE-2013-1692</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1693</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1693" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1693" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1693" ref_url="https://www.suse.com/security/cve/CVE-2013-1693" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1693/">CVE-2013-1693</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1694</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1694" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1694" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1694" ref_url="https://www.suse.com/security/cve/CVE-2013-1694" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1694/">CVE-2013-1694</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1695</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1695" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1695" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1695" ref_url="https://www.suse.com/security/cve/CVE-2013-1695" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1695/">CVE-2013-1695</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1696</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1696" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1696" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1696" ref_url="https://www.suse.com/security/cve/CVE-2013-1696" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-24"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1696/">CVE-2013-1696</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1697</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1697" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1697" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1697" ref_url="https://www.suse.com/security/cve/CVE-2013-1697" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1152-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1153-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1140-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1141-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1143-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly restrict use of DefaultValue for method calls, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers use of a user-defined (1) toString or (2) valueOf method.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1697/">CVE-2013-1697</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1698</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1698" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1698" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1698" ref_url="https://www.suse.com/security/cve/CVE-2013-1698" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1176-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00015.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    The getUserMedia permission implementation in Mozilla Firefox before 22.0 references the URL of a top-level document instead of the URL of a specific page, which makes it easier for remote attackers to trick users into permitting camera or microphone access via a crafted web site that uses IFRAME elements.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-28"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1698/">CVE-2013-1698</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1699</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1699" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1699" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1699" ref_url="https://www.suse.com/security/cve/CVE-2013-1699" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1142-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1180-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-07/msg00041.html" source="SUSE-SU"/>
    <description>
    The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1699/">CVE-2013-1699</cve>
	<bugzilla href="https://bugzilla.suse.com/825935">SUSE bug 825935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1701</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1701" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1701" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1701" ref_url="https://www.suse.com/security/cve/CVE-2013-1701" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1701/">CVE-2013-1701</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1702</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1702" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1702" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1702" ref_url="https://www.suse.com/security/cve/CVE-2013-1702" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-29"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1702/">CVE-2013-1702</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1704</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1704" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1704" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1704" ref_url="https://www.suse.com/security/cve/CVE-2013-1704" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1704/">CVE-2013-1704</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1705</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1705" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1705" ref_url="https://www.suse.com/security/cve/CVE-2013-1705" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1705/">CVE-2013-1705</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1708</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1708" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1708" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1708" ref_url="https://www.suse.com/security/cve/CVE-2013-1708" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1708/">CVE-2013-1708</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1709</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1709" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1709" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1709" ref_url="https://www.suse.com/security/cve/CVE-2013-1709" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving spoofing a relative location in a previously visited document.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1709/">CVE-2013-1709</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1710</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1710" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1710" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1710" ref_url="https://www.suse.com/security/cve/CVE-2013-1710" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-25"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1710/">CVE-2013-1710</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1711</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1711" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1711" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1711" ref_url="https://www.suse.com/security/cve/CVE-2013-1711" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-14"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1711/">CVE-2013-1711</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1713</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1713" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1713" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1713" ref_url="https://www.suse.com/security/cve/CVE-2013-1713" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1713/">CVE-2013-1713</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1714</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1714" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1714" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1714" ref_url="https://www.suse.com/security/cve/CVE-2013-1714" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1714/">CVE-2013-1714</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1717</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1717" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1717" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1717" ref_url="https://www.suse.com/security/cve/CVE-2013-1717" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1382-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00021.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1334-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1348-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-08/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1717/">CVE-2013-1717</cve>
	<bugzilla href="https://bugzilla.suse.com/833389">SUSE bug 833389</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1718</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1718" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1718" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1718" ref_url="https://www.suse.com/security/cve/CVE-2013-1718" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1718/">CVE-2013-1718</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1719</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1719" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1719" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1719" ref_url="https://www.suse.com/security/cve/CVE-2013-1719" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1719/">CVE-2013-1719</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1720</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1720" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1720" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1720" ref_url="https://www.suse.com/security/cve/CVE-2013-1720" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 does not properly maintain the state of the insertion-mode stack for template elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer over-read) by triggering use of this stack in its empty state.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1720/">CVE-2013-1720</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1721</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1721" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1721" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1721" ref_url="https://www.suse.com/security/cve/CVE-2013-1721" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
    <description>
    Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 24.0 and SeaMonkey before 2.21, allows remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1721/">CVE-2013-1721</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1722</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1722" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1722" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1722" ref_url="https://www.suse.com/security/cve/CVE-2013-1722" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving stylesheet cloning.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1722/">CVE-2013-1722</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1723</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1723" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1723" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1723" ref_url="https://www.suse.com/security/cve/CVE-2013-1723" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service (application crash) by leveraging incorrect event usage after widget-memory reallocation.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1723/">CVE-2013-1723</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1724</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1724" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1724" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1724" ref_url="https://www.suse.com/security/cve/CVE-2013-1724" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a destroyed SELECT element.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1724/">CVE-2013-1724</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1725</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1725" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1725" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1725" ref_url="https://www.suse.com/security/cve/CVE-2013-1725" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not ensure that initialization occurs for JavaScript objects with compartments, which allows remote attackers to execute arbitrary code by leveraging incorrect scope handling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1725/">CVE-2013-1725</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1728</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1728" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1728" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1728" ref_url="https://www.suse.com/security/cve/CVE-2013-1728" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1728/">CVE-2013-1728</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1730</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1730" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1730" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1730" ref_url="https://www.suse.com/security/cve/CVE-2013-1730" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly handle movement of XBL-backed nodes between documents, which allows remote attackers to execute arbitrary code or cause a denial of service (JavaScript compartment mismatch, or assertion failure and application exit) via a crafted web site.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-09-09"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1730/">CVE-2013-1730</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1732</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1732" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1732" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1732" ref_url="https://www.suse.com/security/cve/CVE-2013-1732" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via crafted use of lists and floats within a multi-column layout.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-21"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1732/">CVE-2013-1732</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1735</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1735" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1735" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1735" ref_url="https://www.suse.com/security/cve/CVE-2013-1735" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors related to image-document scrolling.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-26"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1735/">CVE-2013-1735</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1736</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1736" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1736" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1736" ref_url="https://www.suse.com/security/cve/CVE-2013-1736" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to improperly establishing parent-child relationships of range-request nodes.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-23"/>
	<severity>Critical</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1736/">CVE-2013-1736</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1737</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1737" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1737" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1737" ref_url="https://www.suse.com/security/cve/CVE-2013-1737" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1497-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1496-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1737/">CVE-2013-1737</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1738</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1738" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1738" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1738" ref_url="https://www.suse.com/security/cve/CVE-2013-1738" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:1491-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1493-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1499-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1100-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1738/">CVE-2013-1738</cve>
	<bugzilla href="https://bugzilla.suse.com/840485">SUSE bug 840485</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116013" comment="MozillaFirefox-devel-38.4.0esr-51.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131809" comment="MozillaFirefox-devel-45.4.0esr-81.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144706" comment="MozillaFirefox-devel-31.1.0esr-1.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157361" comment="MozillaFirefox-devel-52.2.0esr-108.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513621" comment="MozillaFirefox-devel-52.9.0esr-109.38.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513900" comment="MozillaFirefox-devel-68.1.0-109.92.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116011" comment="MozillaFirefox-38.4.0esr-51.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116014" comment="MozillaFirefox-translations-38.4.0esr-51.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131144" comment="MozillaFirefox-45.4.0esr-81.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131145" comment="MozillaFirefox-translations-45.4.0esr-81.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141201" comment="MozillaFirefox-31.1.0esr-1.20 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141202" comment="MozillaFirefox-translations-31.1.0esr-1.20 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157344" comment="MozillaFirefox-52.2.0esr-108.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157346" comment="MozillaFirefox-translations-52.2.0esr-108.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512011" comment="MozillaFirefox-52.9.0esr-109.38.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512012" comment="MozillaFirefox-translations-52.9.0esr-109.38.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512673" comment="MozillaFirefox-68.1.0-109.92.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512674" comment="MozillaFirefox-translations-common-68.1.0-109.92.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1739</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1739" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1739" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1739" ref_url="https://www.suse.com/security/cve/CVE-2013-1739" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1678-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1539-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00013.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1542-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00016.html" source="SUSE-SU"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1739/">CVE-2013-1739</cve>
	<bugzilla href="https://bugzilla.suse.com/842979">SUSE bug 842979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/847708">SUSE bug 847708</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116031" comment="mozilla-nss-devel-3.19.2.1-29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129306" comment="mozilla-nss-devel-3.21.1-46.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144970" comment="mozilla-nss-devel-3.16.4-5.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155345" comment="mozilla-nss-devel-3.29.5-57.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513857" comment="mozilla-nss-devel-3.29.5-58.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514218" comment="mozilla-nss-devel-3.45-58.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116020" comment="libfreebl3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116021" comment="libfreebl3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116024" comment="libsoftokn3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116025" comment="libsoftokn3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129313" comment="libfreebl3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129315" comment="libsoftokn3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143227" comment="libfreebl3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143228" comment="libfreebl3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143229" comment="libsoftokn3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143230" comment="libsoftokn3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155339" comment="libfreebl3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155342" comment="libfreebl3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155340" comment="libsoftokn3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155343" comment="libsoftokn3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513535" comment="libfreebl3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513536" comment="libfreebl3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513537" comment="libsoftokn3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513538" comment="libsoftokn3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513097" comment="libfreebl3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513098" comment="libfreebl3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513099" comment="libfreebl3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513100" comment="libfreebl3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513101" comment="libsoftokn3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513102" comment="libsoftokn3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513103" comment="libsoftokn3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513104" comment="libsoftokn3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513105" comment="mozilla-nss-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513106" comment="mozilla-nss-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513107" comment="mozilla-nss-certs-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513108" comment="mozilla-nss-certs-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513109" comment="mozilla-nss-sysinit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513110" comment="mozilla-nss-sysinit-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513111" comment="mozilla-nss-tools-3.45-58.31.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1740</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1740" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1740" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1740" ref_url="https://www.suse.com/security/cve/CVE-2013-1740" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2014:0213-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html" source="SUSE-SU"/>
    <description>
    The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1740/">CVE-2013-1740</cve>
	<bugzilla href="https://bugzilla.suse.com/859055">SUSE bug 859055</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116031" comment="mozilla-nss-devel-3.19.2.1-29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129306" comment="mozilla-nss-devel-3.21.1-46.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144970" comment="mozilla-nss-devel-3.16.4-5.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155345" comment="mozilla-nss-devel-3.29.5-57.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513857" comment="mozilla-nss-devel-3.29.5-58.12.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514218" comment="mozilla-nss-devel-3.45-58.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116020" comment="libfreebl3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116021" comment="libfreebl3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116024" comment="libsoftokn3-hmac-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116025" comment="libsoftokn3-hmac-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116018" comment="libfreebl3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116019" comment="libfreebl3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116022" comment="libsoftokn3-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116023" comment="libsoftokn3-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116026" comment="mozilla-nss-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116027" comment="mozilla-nss-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116029" comment="mozilla-nss-certs-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116030" comment="mozilla-nss-certs-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116032" comment="mozilla-nss-sysinit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116033" comment="mozilla-nss-sysinit-32bit-3.19.2.1-29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116034" comment="mozilla-nss-tools-3.19.2.1-29.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129283" comment="libfreebl3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129313" comment="libfreebl3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129285" comment="libsoftokn3-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129315" comment="libsoftokn3-hmac-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129289" comment="mozilla-nss-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129291" comment="mozilla-nss-certs-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129293" comment="mozilla-nss-sysinit-32bit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009129282" comment="libfreebl3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129312" comment="libfreebl3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129284" comment="libsoftokn3-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129314" comment="libsoftokn3-hmac-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129288" comment="mozilla-nss-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129290" comment="mozilla-nss-certs-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129292" comment="mozilla-nss-sysinit-3.21.1-46.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009129294" comment="mozilla-nss-tools-3.21.1-46.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141510" comment="libfreebl3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141511" comment="libfreebl3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143227" comment="libfreebl3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143228" comment="libfreebl3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141512" comment="libsoftokn3-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141513" comment="libsoftokn3-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143229" comment="libsoftokn3-hmac-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143230" comment="libsoftokn3-hmac-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141514" comment="mozilla-nss-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141515" comment="mozilla-nss-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141516" comment="mozilla-nss-certs-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141517" comment="mozilla-nss-certs-32bit-3.16.4-5.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141518" comment="mozilla-nss-tools-3.16.4-5.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009155316" comment="libfreebl3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155317" comment="libfreebl3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155339" comment="libfreebl3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155342" comment="libfreebl3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155318" comment="libsoftokn3-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155319" comment="libsoftokn3-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155340" comment="libsoftokn3-hmac-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155343" comment="libsoftokn3-hmac-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155322" comment="mozilla-nss-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155323" comment="mozilla-nss-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155324" comment="mozilla-nss-certs-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155325" comment="mozilla-nss-certs-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155326" comment="mozilla-nss-sysinit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155327" comment="mozilla-nss-sysinit-32bit-3.29.5-57.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009155328" comment="mozilla-nss-tools-3.29.5-57.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512309" comment="libfreebl3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512310" comment="libfreebl3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513535" comment="libfreebl3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513536" comment="libfreebl3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512311" comment="libsoftokn3-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512312" comment="libsoftokn3-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513537" comment="libsoftokn3-hmac-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513538" comment="libsoftokn3-hmac-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512313" comment="mozilla-nss-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512314" comment="mozilla-nss-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512315" comment="mozilla-nss-certs-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512316" comment="mozilla-nss-certs-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512317" comment="mozilla-nss-sysinit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512318" comment="mozilla-nss-sysinit-32bit-3.29.5-58.12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512319" comment="mozilla-nss-tools-3.29.5-58.12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513097" comment="libfreebl3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513098" comment="libfreebl3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513099" comment="libfreebl3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513100" comment="libfreebl3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513101" comment="libsoftokn3-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513102" comment="libsoftokn3-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513103" comment="libsoftokn3-hmac-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513104" comment="libsoftokn3-hmac-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513105" comment="mozilla-nss-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513106" comment="mozilla-nss-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513107" comment="mozilla-nss-certs-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513108" comment="mozilla-nss-certs-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513109" comment="mozilla-nss-sysinit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513110" comment="mozilla-nss-sysinit-32bit-3.45-58.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513111" comment="mozilla-nss-tools-3.45-58.31.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1752</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1752" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1752" ref_url="https://www.suse.com/security/cve/CVE-2013-1752" source="SUSE CVE"/>
		<reference ref_id="SUSE-CU-2020:166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006793.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006960.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006962.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:218-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006963.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:221-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006964.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:32-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006429.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:34-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006436.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:38-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006443.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:544-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007571.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007979.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2020:93-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006622.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-CU-2021:232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008901.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-IU-2021:605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009236.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000947.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1006-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000953.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-August/000958.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2015:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2020:0086-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html" source="SUSE-SU"/>
		<reference ref_id="unknown" ref_url="https://lists.suse.com/archive/suse-security-announce/2007-Jun/0001.html" source="SUSE-SU"/>
    <description>
    ** REJECT ** Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1752/">CVE-2013-1752</cve>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856836">SUSE bug 856836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/863741">SUSE bug 863741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898572">SUSE bug 898572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/912739">SUSE bug 912739</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514245" comment="python3-devel-3.4.6-25.29.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514868" comment="python-devel-2.7.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131910" comment="python-base-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140926" comment="libpython3_4m1_0-3.4.1-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143365" comment="python-base-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140927" comment="python3-base-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145182" comment="python3-devel-3.4.1-12.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159189" comment="python-base-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159191" comment="libpython3_4m1_0-3.4.6-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159192" comment="python3-base-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159835" comment="python3-devel-3.4.6-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512396" comment="libpython3_4m1_0-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513548" comment="python-base-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512397" comment="python3-base-3.4.6-25.16.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513875" comment="python3-devel-3.4.6-25.16.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513207" comment="libpython2_7-1_0-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513208" comment="libpython2_7-1_0-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513213" comment="libpython3_4m1_0-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513214" comment="libpython3_4m1_0-32bit-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513216" comment="libpython3_6m1_0-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513209" comment="python-base-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513210" comment="python-base-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513212" comment="python-xml-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513215" comment="python3-base-3.4.6-25.29.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513217" comment="python36-3.6.8-2.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513218" comment="python36-base-3.6.8-2.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514863" comment="libpython2_7-1_0-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514864" comment="libpython2_7-1_0-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514865" comment="python-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514866" comment="python-base-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514867" comment="python-curses-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514868" comment="python-devel-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514869" comment="python-tk-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514870" comment="python-xml-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009539621" comment="python-devel-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144986" comment="python3-devel-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009543719" comment="libpython2_7-1_0-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543720" comment="libpython2_7-1_0-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141610" comment="libpython3_4m1_0-3.4.1-2.38 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543721" comment="python-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543722" comment="python-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543723" comment="python-base-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543724" comment="python-base-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543725" comment="python-curses-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543726" comment="python-demo-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543727" comment="python-doc-2.7.9-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543728" comment="python-doc-pdf-2.7.9-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543729" comment="python-gdbm-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543730" comment="python-idle-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543731" comment="python-tk-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543732" comment="python-xml-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141611" comment="python3-base-3.4.1-2.38 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009543719" comment="libpython2_7-1_0-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543720" comment="libpython2_7-1_0-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543721" comment="python-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543722" comment="python-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543723" comment="python-base-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543724" comment="python-base-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543725" comment="python-curses-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543726" comment="python-demo-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543727" comment="python-doc-2.7.9-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543728" comment="python-doc-pdf-2.7.9-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543729" comment="python-gdbm-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543730" comment="python-idle-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543731" comment="python-tk-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543732" comment="python-xml-2.7.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009557648" comment="libpython3_6m1_0-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557649" comment="python36-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557650" comment="python36-base-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557651" comment="python36-curses-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557652" comment="python36-dbm-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557653" comment="python36-devel-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557654" comment="python36-doc-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557655" comment="python36-testsuite-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557656" comment="python36-tk-3.6.8-6.14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009557657" comment="python36-tools-3.6.8-6.14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1753</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1753" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1753" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1753" ref_url="https://www.suse.com/security/cve/CVE-2013-1753" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2015-August/001525.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0380-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-03/msg00044.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0498-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-04/msg00020.html" source="SUSE-SU"/>
    <description>
    The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-10"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-1753/">CVE-2013-1753</cve>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514868" comment="python-devel-2.7.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009539621" comment="python-devel-2.7.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131001" comment="python-devel-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130997" comment="libpython2_7-1_0-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131910" comment="python-base-32bit-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009130996" comment="libpython2_7-1_0-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009130999" comment="python-base-2.7.9-24.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131003" comment="python-xml-2.7.9-24.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142009" comment="python-devel-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142006" comment="libpython2_7-1_0-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142007" comment="libpython2_7-1_0-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142008" comment="python-base-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143365" comment="python-base-32bit-2.7.9-20.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142010" comment="python-xml-2.7.9-20.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159189" comment="python-base-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159186" comment="libpython2_7-1_0-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159187" comment="libpython2_7-1_0-32bit-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159188" comment="python-base-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159656" comment="python-devel-2.7.13-27.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159190" comment="python-xml-2.7.13-27.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512394" comment="python-devel-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512391" comment="libpython2_7-1_0-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512392" comment="libpython2_7-1_0-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512393" comment="python-base-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513548" comment="python-base-32bit-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512395" comment="python-xml-2.7.13-28.11.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334164" comment="python is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336411" comment="python-32bit is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335487" comment="python-curses is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336408" comment="python-demo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336409" comment="python-gdbm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336410" comment="python-idle is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335488" comment="python-tk is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513207" comment="libpython2_7-1_0-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513208" comment="libpython2_7-1_0-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513209" comment="python-base-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513210" comment="python-base-32bit-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513211" comment="python-devel-2.7.13-28.31.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513212" comment="python-xml-2.7.13-28.31.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514863" comment="libpython2_7-1_0-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514864" comment="libpython2_7-1_0-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514865" comment="python-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514866" comment="python-base-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514867" comment="python-curses-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514868" comment="python-devel-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514869" comment="python-tk-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514870" comment="python-xml-2.7.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009543719" comment="libpython2_7-1_0-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543720" comment="libpython2_7-1_0-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543721" comment="python-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543722" comment="python-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543723" comment="python-base-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543724" comment="python-base-32bit-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543725" comment="python-curses-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543726" comment="python-demo-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543727" comment="python-doc-2.7.9-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543728" comment="python-doc-pdf-2.7.9-14.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543729" comment="python-gdbm-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543730" comment="python-idle-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543731" comment="python-tk-2.7.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009543732" comment="python-xml-2.7.9-14.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1762</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1762" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1762" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1762" ref_url="https://www.suse.com/security/cve/CVE-2013-1762" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000431.html" source="SUSE-SU"/>
    <description>
    stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1762/">CVE-2013-1762</cve>
	<bugzilla href="https://bugzilla.suse.com/807440">SUSE bug 807440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807450">SUSE bug 807450</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009110494" comment="stunnel-5.00-3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143297" comment="stunnel-5.00-1.19 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513417" comment="stunnel-5.00-4.3.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1763</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1763" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1763" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1763" ref_url="https://www.suse.com/security/cve/CVE-2013-1763" source="SUSE CVE"/>
		<reference ref_id="openSUSE-SU-2013:0395-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
    <description>
    Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1763/">CVE-2013-1763</cve>
	<bugzilla href="https://bugzilla.suse.com/805633">SUSE bug 805633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807436">SUSE bug 807436</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1767</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1767" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1767" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1767" ref_url="https://www.suse.com/security/cve/CVE-2013-1767" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in the shmem_remount_fs function in mm/shmem.c in the Linux kernel before 3.7.10 allows local users to gain privileges or cause a denial of service (system crash) by remounting a tmpfs filesystem without specifying a required mpol (aka mempolicy) mount option.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1767/">CVE-2013-1767</cve>
	<bugzilla href="https://bugzilla.suse.com/806138">SUSE bug 806138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807436">SUSE bug 807436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1772</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1772" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1772" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1772" ref_url="https://www.suse.com/security/cve/CVE-2013-1772" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-05-12"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1772/">CVE-2013-1772</cve>
	<bugzilla href="https://bugzilla.suse.com/806238">SUSE bug 806238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807441">SUSE bug 807441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1773</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1773" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1773" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1773" ref_url="https://www.suse.com/security/cve/CVE-2013-1773" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
    <description>
    Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversion.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1773/">CVE-2013-1773</cve>
	<bugzilla href="https://bugzilla.suse.com/806977">SUSE bug 806977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807452">SUSE bug 807452</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1774</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1774" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1774" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1774" ref_url="https://www.suse.com/security/cve/CVE-2013-1774" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1182-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00017.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
    <description>
    The chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service (NULL pointer dereference and system crash) via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1774/">CVE-2013-1774</cve>
	<bugzilla href="https://bugzilla.suse.com/806976">SUSE bug 806976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/807455">SUSE bug 807455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1775</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1775" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1775" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1775" ref_url="https://www.suse.com/security/cve/CVE-2013-1775" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000613.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000614.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00074.html" source="SUSE-SU"/>
    <description>
    sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1775/">CVE-2013-1775</cve>
	<bugzilla href="https://bugzilla.suse.com/806919">SUSE bug 806919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/806921">SUSE bug 806921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/815325">SUSE bug 815325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/845568">SUSE bug 845568</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141130" comment="sudo-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141810" comment="sudo-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144993" comment="sudo-devel-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145367" comment="sudo-devel-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159307" comment="sudo-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159839" comment="sudo-devel-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512620" comment="sudo-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513418" comment="sudo-1.8.27-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513882" comment="sudo-devel-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514252" comment="sudo-devel-1.8.27-2.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1776</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1776" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1776" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1776" ref_url="https://www.suse.com/security/cve/CVE-2013-1776" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000452.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000613.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000614.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0495-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0503-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-03/msg00074.html" source="SUSE-SU"/>
    <description>
    sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal.  NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-07-22"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1776/">CVE-2013-1776</cve>
	<bugzilla href="https://bugzilla.suse.com/806921">SUSE bug 806921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817349">SUSE bug 817349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/817350">SUSE bug 817350</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141130" comment="sudo-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141810" comment="sudo-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144993" comment="sudo-devel-1.8.10p3-1.62 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145367" comment="sudo-devel-1.8.10p3-6.16 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159307" comment="sudo-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159839" comment="sudo-devel-1.8.20p2-1.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334290" comment="sudo is not affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512620" comment="sudo-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513418" comment="sudo-1.8.27-2.2 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513882" comment="sudo-devel-1.8.20p2-3.7.10 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514252" comment="sudo-devel-1.8.27-2.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1788</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1788" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1788" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1788" ref_url="https://www.suse.com/security/cve/CVE-2013-1788" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000403.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00051.html" source="SUSE-SU"/>
    <description>
    poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1788/">CVE-2013-1788</cve>
	<bugzilla href="https://bugzilla.suse.com/806793">SUSE bug 806793</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1789</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1789" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1789" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1789" ref_url="https://www.suse.com/security/cve/CVE-2013-1789" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000403.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00051.html" source="SUSE-SU"/>
    <description>
    splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1789/">CVE-2013-1789</cve>
	<bugzilla href="https://bugzilla.suse.com/806793">SUSE bug 806793</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1790</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1790" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1790" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1790" ref_url="https://www.suse.com/security/cve/CVE-2013-1790" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000402.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-April/000403.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0255-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-02/msg00051.html" source="SUSE-SU"/>
    <description>
    poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1790/">CVE-2013-1790</cve>
	<bugzilla href="https://bugzilla.suse.com/806793">SUSE bug 806793</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128640" comment="libpoppler44-0.24.4-12.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140905" comment="libpoppler-glib8-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140906" comment="libpoppler-qt4-4-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140907" comment="libpoppler60-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140908" comment="poppler-tools-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141591" comment="libpoppler-glib8-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141592" comment="libpoppler-qt4-4-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141593" comment="libpoppler44-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141594" comment="poppler-tools-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143245" comment="libpoppler-glib8-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143246" comment="libpoppler-qt4-4-0.24.4-3.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143247" comment="libpoppler44-0.24.4-3.8 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143248" comment="poppler-tools-0.24.4-3.8 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144911" comment="libpoppler-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144912" comment="libpoppler-glib-devel-0.24.4-3.14 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144913" comment="libpoppler-qt4-devel-0.24.4-3.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144914" comment="typelib-1_0-Poppler-0_18-0.24.4-3.14 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145311" comment="libpoppler-cpp0-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145312" comment="libpoppler-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145313" comment="libpoppler-glib-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145314" comment="libpoppler-qt4-devel-0.43.0-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157354" comment="libpoppler44-0.24.4-14.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145315" comment="typelib-1_0-Poppler-0_18-0.43.0-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512385" comment="libpoppler-glib8-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512386" comment="libpoppler-qt4-4-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512387" comment="libpoppler60-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512388" comment="poppler-tools-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513771" comment="libpoppler-cpp0-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513772" comment="libpoppler-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513773" comment="libpoppler-glib-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513774" comment="libpoppler-qt4-devel-0.43.0-16.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009166659" comment="libpoppler44-0.24.4-14.13.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513775" comment="typelib-1_0-Poppler-0_18-0.43.0-16.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1792</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1792" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1792" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1792" ref_url="https://www.suse.com/security/cve/CVE-2013-1792" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:0204-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html" source="SUSE-SU"/>
    <description>
    Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1792/">CVE-2013-1792</cve>
	<bugzilla href="https://bugzilla.suse.com/807428">SUSE bug 807428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/808358">SUSE bug 808358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1796</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1796" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1796" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1796" ref_url="https://www.suse.com/security/cve/CVE-2013-1796" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allows guest OS users to cause a denial of service (buffer overflow and host OS memory corruption) or possibly have unspecified other impact via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1796/">CVE-2013-1796</cve>
	<bugzilla href="https://bugzilla.suse.com/806980">SUSE bug 806980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819789">SUSE bug 819789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1797</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1797" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1797" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1797" ref_url="https://www.suse.com/security/cve/CVE-2013-1797" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0847-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1187-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html" source="SUSE-SU"/>
    <description>
    Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1797/">CVE-2013-1797</cve>
	<bugzilla href="https://bugzilla.suse.com/806980">SUSE bug 806980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/819789">SUSE bug 819789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1799</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP1</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP2</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP3</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP4</platform>
            <platform>SUSE Linux Enterprise Workstation Extension 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1799" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1799" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1799" ref_url="https://www.suse.com/security/cve/CVE-2013-1799" source="SUSE CVE"/>
    <description>
    Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup library, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network. NOTE: this issue exists because of an incomplete fix for CVE-2013-0240.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1799/">CVE-2013-1799</cve>
	<bugzilla href="https://bugzilla.suse.com/808534">SUSE bug 808534</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-we:12</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-we:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140636" comment="libgoa-1_0-0-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140637" comment="libgoa-backend-1_0-1-3.20.4-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141400" comment="gnome-online-accounts-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141401" comment="gnome-online-accounts-lang-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141402" comment="libgoa-1_0-0-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141403" comment="libgoa-backend-1_0-1-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141404" comment="typelib-1_0-Goa-1_0-3.10.5-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117478" comment="SUSE Linux Enterprise Workstation Extension 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118890" comment="SUSE Linux Enterprise Workstation Extension 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141400" comment="gnome-online-accounts-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141401" comment="gnome-online-accounts-lang-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141404" comment="typelib-1_0-Goa-1_0-3.10.5-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141402" comment="libgoa-1_0-0-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141403" comment="libgoa-backend-1_0-1-3.10.5-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142108" comment="gnome-online-accounts-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142109" comment="gnome-online-accounts-lang-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140636" comment="libgoa-1_0-0-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142110" comment="libgoa-1_0-0-32bit-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140637" comment="libgoa-backend-1_0-1-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142111" comment="typelib-1_0-Goa-1_0-3.20.4-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009136016" comment="SUSE Linux Enterprise Workstation Extension 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009142108" comment="gnome-online-accounts-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142109" comment="gnome-online-accounts-lang-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142110" comment="libgoa-1_0-0-32bit-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142111" comment="typelib-1_0-Goa-1_0-3.20.4-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143234" comment="libgoa-1_0-0-3.10.5-1.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143235" comment="libgoa-backend-1_0-1-3.10.5-1.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144777" comment="gnome-online-accounts-devel-3.10.5-1.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141404" comment="typelib-1_0-Goa-1_0-3.10.5-1.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145243" comment="gnome-online-accounts-devel-3.20.4-7.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009142111" comment="typelib-1_0-Goa-1_0-3.20.4-7.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159138" comment="libgoa-1_0-0-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159139" comment="libgoa-backend-1_0-1-3.20.5-9.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159641" comment="gnome-online-accounts-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159642" comment="gnome-online-accounts-lang-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159138" comment="libgoa-1_0-0-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159643" comment="libgoa-1_0-0-32bit-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159139" comment="libgoa-backend-1_0-1-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159644" comment="typelib-1_0-Goa-1_0-3.20.5-9.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159844" comment="SUSE Linux Enterprise Workstation Extension 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240553" comment="SUSE Linux Enterprise Workstation Extension 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159641" comment="gnome-online-accounts-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159642" comment="gnome-online-accounts-lang-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159643" comment="libgoa-1_0-0-32bit-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159644" comment="typelib-1_0-Goa-1_0-3.20.5-9.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159760" comment="gnome-online-accounts-devel-3.20.5-9.6 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159644" comment="typelib-1_0-Goa-1_0-3.20.5-9.6 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513117" comment="libgoa-1_0-0-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513118" comment="libgoa-backend-1_0-1-3.20.8-10.4.50 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513981" comment="gnome-online-accounts-devel-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513982" comment="typelib-1_0-Goa-1_0-3.20.8-10.4.50 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258650" comment="SUSE Linux Enterprise Workstation Extension 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514281" comment="gnome-online-accounts-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514282" comment="gnome-online-accounts-lang-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514283" comment="libgoa-1_0-0-32bit-3.20.8-10.4.50 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513982" comment="typelib-1_0-Goa-1_0-3.20.8-10.4.50 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1819</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1819" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1819" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1819" ref_url="https://www.suse.com/security/cve/CVE-2013-1819" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1473-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1474-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000607.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-October/000608.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1619-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-10/msg00063.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1773-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00106.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1971-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html" source="SUSE-SU"/>
    <description>
    The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1819/">CVE-2013-1819</cve>
	<bugzilla href="https://bugzilla.suse.com/807471">SUSE bug 807471</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1824</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12</platform>
            <platform>SUSE Linux Enterprise Module for Web and Scripting 12</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1824" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1824" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1824" ref_url="https://www.suse.com/security/cve/CVE-2013-1824" source="SUSE CVE"/>
    <description>
    The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1824/">CVE-2013-1824</cve>
	<bugzilla href="https://bugzilla.suse.com/807707">SUSE bug 807707</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-web-scripting:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle_hpc:12</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144982" comment="php5-devel-5.5.14-4.20 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145180" comment="php5-devel-5.5.14-39.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131807" comment="php5-devel-5.5.14-73.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131811" comment="php7-devel-7.0.7-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157331" comment="php5-devel-5.5.14-108.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157744" comment="php7-devel-7.0.7-49.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703659" comment="SUSE Linux Enterprise High Performance Computing 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009178200" comment="SUSE Linux Enterprise Module for Web and Scripting 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009336757" comment="apache2-mod_php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333969" comment="php5 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336758" comment="php5-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336759" comment="php5-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336760" comment="php5-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336761" comment="php5-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336762" comment="php5-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336763" comment="php5-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336765" comment="php5-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728528" comment="php5-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336766" comment="php5-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336767" comment="php5-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728529" comment="php5-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728530" comment="php5-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336768" comment="php5-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336769" comment="php5-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336770" comment="php5-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336771" comment="php5-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336773" comment="php5-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336801" comment="php5-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728531" comment="php5-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336774" comment="php5-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336775" comment="php5-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336776" comment="php5-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336777" comment="php5-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336778" comment="php5-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336779" comment="php5-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728532" comment="php5-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336780" comment="php5-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336781" comment="php5-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336782" comment="php5-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336783" comment="php5-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336784" comment="php5-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728533" comment="php5-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336803" comment="php5-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336785" comment="php5-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336786" comment="php5-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336787" comment="php5-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336788" comment="php5-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336805" comment="php5-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336806" comment="php5-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336789" comment="php5-suhosin is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336790" comment="php5-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336791" comment="php5-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336792" comment="php5-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336793" comment="php5-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336794" comment="php5-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336795" comment="php5-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336796" comment="php5-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336797" comment="php5-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336798" comment="php5-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336799" comment="php5-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009336800" comment="php5-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340934" comment="apache2-mod_php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334144" comment="php7 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340935" comment="php7-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340936" comment="php7-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340937" comment="php7-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340938" comment="php7-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340939" comment="php7-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340940" comment="php7-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340941" comment="php7-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340942" comment="php7-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340943" comment="php7-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340944" comment="php7-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340945" comment="php7-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340946" comment="php7-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340947" comment="php7-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340948" comment="php7-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340949" comment="php7-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340950" comment="php7-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340951" comment="php7-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728534" comment="php7-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340952" comment="php7-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340953" comment="php7-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340954" comment="php7-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340955" comment="php7-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728535" comment="php7-mcrypt is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340956" comment="php7-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340957" comment="php7-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340958" comment="php7-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340959" comment="php7-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340960" comment="php7-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340961" comment="php7-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340962" comment="php7-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340963" comment="php7-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340964" comment="php7-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340965" comment="php7-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340966" comment="php7-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728536" comment="php7-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340968" comment="php7-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340969" comment="php7-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340970" comment="php7-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340971" comment="php7-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340973" comment="php7-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340974" comment="php7-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340975" comment="php7-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340976" comment="php7-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340977" comment="php7-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340978" comment="php7-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340979" comment="php7-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340980" comment="php7-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340981" comment="php7-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340982" comment="php7-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340983" comment="php7-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340984" comment="php7-zlib is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728537" comment="apache2-mod_php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334143" comment="php72 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728538" comment="php72-bcmath is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728539" comment="php72-bz2 is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728540" comment="php72-calendar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728541" comment="php72-ctype is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728542" comment="php72-curl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728543" comment="php72-dba is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728544" comment="php72-dom is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728545" comment="php72-enchant is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728546" comment="php72-exif is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728547" comment="php72-fastcgi is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728548" comment="php72-fileinfo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728549" comment="php72-fpm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728550" comment="php72-ftp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728551" comment="php72-gd is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728552" comment="php72-gettext is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728553" comment="php72-gmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728554" comment="php72-iconv is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728555" comment="php72-imap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728556" comment="php72-intl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728557" comment="php72-json is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728558" comment="php72-ldap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728559" comment="php72-mbstring is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728560" comment="php72-mysql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728561" comment="php72-odbc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728562" comment="php72-opcache is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728563" comment="php72-openssl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728564" comment="php72-pcntl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728565" comment="php72-pdo is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728566" comment="php72-pear is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728567" comment="php72-pear-Archive_Tar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728568" comment="php72-pgsql is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728569" comment="php72-phar is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728570" comment="php72-posix is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728571" comment="php72-pspell is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728572" comment="php72-readline is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728573" comment="php72-shmop is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728574" comment="php72-snmp is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728575" comment="php72-soap is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728576" comment="php72-sockets is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728577" comment="php72-sodium is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728578" comment="php72-sqlite is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728579" comment="php72-sysvmsg is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728580" comment="php72-sysvsem is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728581" comment="php72-sysvshm is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728582" comment="php72-tidy is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728583" comment="php72-tokenizer is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728584" comment="php72-wddx is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728585" comment="php72-xmlreader is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728586" comment="php72-xmlrpc is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728587" comment="php72-xmlwriter is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728588" comment="php72-xsl is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728589" comment="php72-zip is affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728590" comment="php72-zlib is affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513869" comment="php5-devel-5.5.14-109.41.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513870" comment="php7-devel-7.0.7-50.52.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514238" comment="php7-devel-7.0.7-50.85.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514239" comment="php72-devel-7.2.5-1.26.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1826</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1826" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1826" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1826" ref_url="https://www.suse.com/security/cve/CVE-2013-1826" source="SUSE CVE"/>
    <description>
    The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1826/">CVE-2013-1826</cve>
	<bugzilla href="https://bugzilla.suse.com/809889">SUSE bug 809889</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1827</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1827" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1827" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1827" ref_url="https://www.suse.com/security/cve/CVE-2013-1827" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000659.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2014-February/000734.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:0536-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00013.html" source="SUSE-SU"/>
    <description>
    net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for a certain (1) sender or (2) receiver getsockopt call.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1827/">CVE-2013-1827</cve>
	<bugzilla href="https://bugzilla.suse.com/811354">SUSE bug 811354</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1841</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-TERADATA</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1841" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1841" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1841" ref_url="https://www.suse.com/security/cve/CVE-2013-1841" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2023:0746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014043.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2023:0759-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014069.html" source="SUSE-SU"/>
    <description>
    Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-03-17"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1841/">CVE-2013-1841</cve>
	<bugzilla href="https://bugzilla.suse.com/808830">SUSE bug 808830</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_teradata:12:sp3</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338846" comment="perl-Net-Server is affected"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-TERADATA is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009743734" comment="perl-Net-Server-2.007-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1845</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1845" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1845" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1845" ref_url="https://www.suse.com/security/cve/CVE-2013-1845" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00069.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a large number of properties for a file or directory.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-12"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1845/">CVE-2013-1845</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1846</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1846" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1846" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1846" ref_url="https://www.suse.com/security/cve/CVE-2013-1846" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00069.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1846/">CVE-2013-1846</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1847</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1847" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1847" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1847" ref_url="https://www.suse.com/security/cve/CVE-2013-1847" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00069.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-05-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1847/">CVE-2013-1847</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1848</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1848" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1848" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1848" ref_url="https://www.suse.com/security/cve/CVE-2013-1848" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0824-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-05/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0923-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00059.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0925-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html" source="SUSE-SU"/>
    <description>
    fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1848/">CVE-2013-1848</cve>
	<bugzilla href="https://bugzilla.suse.com/809155">SUSE bug 809155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1849</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1849" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1849" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1849" ref_url="https://www.suse.com/security/cve/CVE-2013-1849" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000467.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0932-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-06/msg00069.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1849/">CVE-2013-1849</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1860</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1860" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1860" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1860" ref_url="https://www.suse.com/security/cve/CVE-2013-1860" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0759-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00000.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0759-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00001.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0786-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-05/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1138-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00023.html" source="SUSE-SU"/>
    <description>
    Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted cdc-wdm USB device.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1860/">CVE-2013-1860</cve>
	<bugzilla href="https://bugzilla.suse.com/806431">SUSE bug 806431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871595">SUSE bug 871595</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1863</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1863" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1863" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1863" ref_url="https://www.suse.com/security/cve/CVE-2013-1863" source="SUSE CVE"/>
    <description>
    Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1863/">CVE-2013-1863</cve>
	<bugzilla href="https://bugzilla.suse.com/809624">SUSE bug 809624</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140795" comment="libdcerpc-binding0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140797" comment="libdcerpc0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140799" comment="libndr-krb5pac0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140801" comment="libndr-nbt0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140803" comment="libndr-standard0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140805" comment="libndr0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140807" comment="libnetapi0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140809" comment="libsamba-credentials0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140811" comment="libsamba-errors0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140813" comment="libsamba-hostconfig0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140815" comment="libsamba-passdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140817" comment="libsamba-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140819" comment="libsamdb0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140821" comment="libsmbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140823" comment="libsmbconf0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140825" comment="libsmbldap0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140827" comment="libtevent-util0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140829" comment="libwbclient0-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140832" comment="samba-client-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140835" comment="samba-libs-32bit-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140837" comment="samba-winbind-32bit-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131768" comment="libdcerpc-atsvc0-4.2.4-26.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140794" comment="libdcerpc-binding0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140796" comment="libdcerpc0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140798" comment="libndr-krb5pac0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140800" comment="libndr-nbt0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140802" comment="libndr-standard0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140804" comment="libndr0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140806" comment="libnetapi0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140808" comment="libsamba-credentials0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140810" comment="libsamba-errors0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140812" comment="libsamba-hostconfig0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140814" comment="libsamba-passdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140816" comment="libsamba-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140818" comment="libsamdb0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140820" comment="libsmbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140822" comment="libsmbconf0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140824" comment="libsmbldap0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140826" comment="libtevent-util0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140828" comment="libwbclient0-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140830" comment="samba-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140831" comment="samba-client-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140833" comment="samba-doc-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140834" comment="samba-libs-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140836" comment="samba-winbind-4.4.2-29.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141457" comment="libdcerpc-binding0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141458" comment="libdcerpc-binding0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141459" comment="libdcerpc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141460" comment="libdcerpc0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141461" comment="libgensec0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141462" comment="libgensec0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141463" comment="libndr-krb5pac0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141464" comment="libndr-krb5pac0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141465" comment="libndr-nbt0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141466" comment="libndr-nbt0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141467" comment="libndr-standard0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141468" comment="libndr-standard0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141469" comment="libndr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141470" comment="libndr0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141471" comment="libnetapi0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141472" comment="libnetapi0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141473" comment="libpdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141474" comment="libpdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141475" comment="libregistry0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141476" comment="libsamba-credentials0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141477" comment="libsamba-credentials0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141478" comment="libsamba-hostconfig0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141479" comment="libsamba-hostconfig0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141480" comment="libsamba-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141481" comment="libsamba-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141482" comment="libsamdb0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141483" comment="libsamdb0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141484" comment="libsmbclient-raw0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141485" comment="libsmbclient-raw0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141486" comment="libsmbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141487" comment="libsmbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141488" comment="libsmbconf0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141489" comment="libsmbconf0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141490" comment="libsmbldap0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141491" comment="libsmbldap0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141492" comment="libtevent-util0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141493" comment="libtevent-util0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141494" comment="libwbclient0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141495" comment="libwbclient0-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141496" comment="samba-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141497" comment="samba-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141498" comment="samba-client-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141499" comment="samba-client-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141500" comment="samba-doc-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141501" comment="samba-libs-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141502" comment="samba-libs-32bit-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141503" comment="samba-winbind-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141504" comment="samba-winbind-32bit-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141917" comment="libdcerpc-binding0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141918" comment="libdcerpc-binding0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141919" comment="libdcerpc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141920" comment="libdcerpc0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141921" comment="libgensec0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141922" comment="libgensec0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141923" comment="libndr-krb5pac0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141924" comment="libndr-krb5pac0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141925" comment="libndr-nbt0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141926" comment="libndr-nbt0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141927" comment="libndr-standard0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141928" comment="libndr-standard0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141929" comment="libndr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141930" comment="libndr0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141931" comment="libnetapi0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141932" comment="libnetapi0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141933" comment="libregistry0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141934" comment="libsamba-credentials0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141935" comment="libsamba-credentials0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141936" comment="libsamba-hostconfig0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141937" comment="libsamba-hostconfig0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141938" comment="libsamba-passdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141939" comment="libsamba-passdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141940" comment="libsamba-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141941" comment="libsamba-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141942" comment="libsamdb0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141943" comment="libsamdb0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141944" comment="libsmbclient-raw0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141945" comment="libsmbclient-raw0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141946" comment="libsmbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141947" comment="libsmbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141948" comment="libsmbconf0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141949" comment="libsmbconf0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141950" comment="libsmbldap0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141951" comment="libsmbldap0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141952" comment="libtevent-util0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141953" comment="libtevent-util0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141954" comment="libwbclient0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141955" comment="libwbclient0-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141956" comment="samba-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141957" comment="samba-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141958" comment="samba-client-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141959" comment="samba-client-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141960" comment="samba-doc-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141961" comment="samba-libs-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141962" comment="samba-libs-32bit-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141963" comment="samba-winbind-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141964" comment="samba-winbind-32bit-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144823" comment="libdcerpc-atsvc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144824" comment="libdcerpc-atsvc0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144825" comment="libdcerpc-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144826" comment="libdcerpc-samr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144827" comment="libdcerpc-samr0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144828" comment="libgensec-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144829" comment="libndr-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144830" comment="libndr-krb5pac-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144831" comment="libndr-nbt-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144832" comment="libndr-standard-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144833" comment="libnetapi-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144834" comment="libpdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144835" comment="libregistry-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144836" comment="libsamba-credentials-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144837" comment="libsamba-hostconfig-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144838" comment="libsamba-policy-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144839" comment="libsamba-policy0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144840" comment="libsamba-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144841" comment="libsamdb-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144842" comment="libsmbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144843" comment="libsmbclient-raw-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144844" comment="libsmbconf-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144845" comment="libsmbldap-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144846" comment="libsmbsharemodes-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144847" comment="libsmbsharemodes0-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144848" comment="libtevent-util-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144849" comment="libwbclient-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144850" comment="samba-core-devel-4.1.12-3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144851" comment="samba-test-devel-4.1.12-3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145094" comment="libdcerpc-atsvc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145095" comment="libdcerpc-atsvc0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145096" comment="libdcerpc-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145097" comment="libdcerpc-samr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145098" comment="libdcerpc-samr0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145099" comment="libgensec-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145100" comment="libndr-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145101" comment="libndr-krb5pac-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145102" comment="libndr-nbt-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145103" comment="libndr-standard-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145104" comment="libnetapi-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145105" comment="libregistry-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145106" comment="libsamba-credentials-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145107" comment="libsamba-hostconfig-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145108" comment="libsamba-passdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145109" comment="libsamba-policy-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145110" comment="libsamba-policy0-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145111" comment="libsamba-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145112" comment="libsamdb-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145113" comment="libsmbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145114" comment="libsmbclient-raw-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145115" comment="libsmbconf-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145116" comment="libsmbldap-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145117" comment="libtevent-util-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145118" comment="libwbclient-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145119" comment="samba-core-devel-4.2.4-4.19 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145120" comment="samba-test-devel-4.2.4-4.19 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145319" comment="libsmbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145320" comment="libwbclient-devel-4.4.2-29.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131793" comment="samba-test-devel-4.2.4-26.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159085" comment="libdcerpc-binding0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159086" comment="libdcerpc-binding0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159087" comment="libdcerpc0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159088" comment="libdcerpc0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159089" comment="libndr-krb5pac0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159090" comment="libndr-krb5pac0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159091" comment="libndr-nbt0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159092" comment="libndr-nbt0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159093" comment="libndr-standard0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159094" comment="libndr-standard0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159095" comment="libndr0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159096" comment="libndr0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159097" comment="libnetapi0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159098" comment="libnetapi0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159099" comment="libsamba-credentials0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159100" comment="libsamba-credentials0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159101" comment="libsamba-errors0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159102" comment="libsamba-errors0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159103" comment="libsamba-hostconfig0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159104" comment="libsamba-hostconfig0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159105" comment="libsamba-passdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159106" comment="libsamba-passdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159107" comment="libsamba-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159108" comment="libsamba-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159109" comment="libsamdb0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159110" comment="libsamdb0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159111" comment="libsmbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159112" comment="libsmbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159113" comment="libsmbconf0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159114" comment="libsmbconf0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159115" comment="libsmbldap0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159116" comment="libsmbldap0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159117" comment="libtevent-util0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159118" comment="libtevent-util0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159119" comment="libwbclient0-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159120" comment="libwbclient0-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159121" comment="samba-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159122" comment="samba-client-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159123" comment="samba-client-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159124" comment="samba-doc-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159125" comment="samba-libs-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159126" comment="samba-libs-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159127" comment="samba-winbind-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159128" comment="samba-winbind-32bit-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159824" comment="libsmbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159825" comment="libwbclient-devel-4.6.5+git.27.6afd48b1083-2.11 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512260" comment="libdcerpc-binding0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512261" comment="libdcerpc-binding0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512262" comment="libdcerpc0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512263" comment="libdcerpc0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512264" comment="libndr-krb5pac0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512265" comment="libndr-krb5pac0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512266" comment="libndr-nbt0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512267" comment="libndr-nbt0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512268" comment="libndr-standard0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512269" comment="libndr-standard0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512270" comment="libndr0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512271" comment="libndr0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512272" comment="libnetapi0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512273" comment="libnetapi0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512274" comment="libsamba-credentials0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512275" comment="libsamba-credentials0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512276" comment="libsamba-errors0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512277" comment="libsamba-errors0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512278" comment="libsamba-hostconfig0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512279" comment="libsamba-hostconfig0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512280" comment="libsamba-passdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512281" comment="libsamba-passdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512282" comment="libsamba-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512283" comment="libsamba-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512284" comment="libsamdb0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512285" comment="libsamdb0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512286" comment="libsmbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512287" comment="libsmbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512288" comment="libsmbconf0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512289" comment="libsmbconf0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512290" comment="libsmbldap0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512291" comment="libsmbldap0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512292" comment="libtevent-util0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512293" comment="libtevent-util0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512294" comment="libwbclient0-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512295" comment="libwbclient0-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512296" comment="samba-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512297" comment="samba-client-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512298" comment="samba-client-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512299" comment="samba-doc-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512300" comment="samba-libs-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512301" comment="samba-libs-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512302" comment="samba-winbind-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512303" comment="samba-winbind-32bit-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513039" comment="libdcerpc-binding0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513040" comment="libdcerpc-binding0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513041" comment="libdcerpc0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513042" comment="libdcerpc0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513043" comment="libndr-krb5pac0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513044" comment="libndr-krb5pac0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513045" comment="libndr-nbt0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513046" comment="libndr-nbt0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513047" comment="libndr-standard0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513048" comment="libndr-standard0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513049" comment="libndr0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513050" comment="libndr0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513051" comment="libnetapi0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513052" comment="libnetapi0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513053" comment="libsamba-credentials0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513054" comment="libsamba-credentials0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513055" comment="libsamba-errors0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513056" comment="libsamba-errors0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513057" comment="libsamba-hostconfig0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513058" comment="libsamba-hostconfig0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513059" comment="libsamba-passdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513060" comment="libsamba-passdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513061" comment="libsamba-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513062" comment="libsamba-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513063" comment="libsamdb0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513064" comment="libsamdb0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513065" comment="libsmbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513066" comment="libsmbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513067" comment="libsmbconf0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513068" comment="libsmbconf0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513069" comment="libsmbldap2-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513070" comment="libsmbldap2-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513071" comment="libtevent-util0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513072" comment="libtevent-util0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513073" comment="libwbclient0-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513074" comment="libwbclient0-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513075" comment="samba-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513076" comment="samba-client-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513077" comment="samba-client-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513078" comment="samba-doc-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513079" comment="samba-libs-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513080" comment="samba-libs-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513081" comment="samba-libs-python3-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513082" comment="samba-libs-python3-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513083" comment="samba-winbind-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513084" comment="samba-winbind-32bit-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513743" comment="libndr-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513744" comment="libndr-krb5pac-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513745" comment="libndr-nbt-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513746" comment="libndr-standard-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513747" comment="libsamba-util-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513748" comment="libsmbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513749" comment="libwbclient-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513750" comment="samba-core-devel-4.6.16+git.124.aee309c5c18-3.32.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514082" comment="libndr-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514083" comment="libndr-krb5pac-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514084" comment="libndr-nbt-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514085" comment="libndr-standard-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514086" comment="libsamba-util-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514087" comment="libsmbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514088" comment="libwbclient-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514089" comment="samba-core-devel-4.10.5+git.129.35f7bb6e177-1.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1866</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1866" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1866" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1866" ref_url="https://www.suse.com/security/cve/CVE-2013-1866" source="SUSE CVE"/>
    <description>
    OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2023-01-14"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-1866/">CVE-2013-1866</cve>
	<bugzilla href="https://bugzilla.suse.com/1162390">SUSE bug 1162390</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334110" comment="opensc is not affected"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1873</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP4</platform>
            <platform>SUSE Linux Enterprise Real Time 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-BCL</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-ESPOS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4-LTSS</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12-LTSS</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1873" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1873" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1873" ref_url="https://www.suse.com/security/cve/CVE-2013-1873" source="SUSE CVE"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2634, CVE-2013-2635, CVE-2013-2636. Reason: This candidate is a duplicate of CVE-2013-2634, CVE-2013-2635, and CVE-2013-2636. Notes: All CVE users should reference one or more of CVE-2013-2634, CVE-2013-2635, and CVE-2013-2636 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Low</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1873/">CVE-2013-1873</cve>
	<bugzilla href="https://bugzilla.suse.com/810473">SUSE bug 810473</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-bcl:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-espos:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles-ltss:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp4</cpe>
		<cpe>cpe:/o:suse:suse-linux-enterprise-rt:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335424" comment="kernel-default-extra is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722236" comment="SUSE Linux Enterprise Server 12 SP3-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009286813" comment="SUSE Linux Enterprise Server 12 SP4-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009722235" comment="SUSE Linux Enterprise Server 12 SP2-BCL is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009132242" comment="SUSE Linux Enterprise Server 12 SP2-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340306" comment="kernel-devel-azure is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2-LTSS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12-LTSS is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009132443" comment="SUSE Linux Enterprise Server 12 SP3-ESPOS is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3-LTSS is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009334017" comment="kernel-default is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335425" comment="kernel-default-base is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335423" comment="kernel-default-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009338031" comment="kernel-default-kgraft is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009335426" comment="kernel-default-man is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334791" comment="kernel-devel is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009334792" comment="kernel-macros is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009333928" comment="kernel-source is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009340305" comment="kernel-source-azure is not affected"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009265180" comment="SUSE Linux Enterprise Real Time 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009279486" comment="SUSE Linux Enterprise Real Time 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728711" comment="kernel-devel-rt is not affected"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009728712" comment="kernel-source-rt is not affected"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1881</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1881" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1881" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1881" ref_url="https://www.suse.com/security/cve/CVE-2013-1881" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2015:1785-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00020.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1786-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-11/msg00114.html" source="SUSE-SU"/>
    <description>
    GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1881/">CVE-2013-1881</cve>
	<bugzilla href="https://bugzilla.suse.com/840753">SUSE bug 840753</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140597" comment="gdk-pixbuf-loader-rsvg-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140598" comment="librsvg-2-2-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140599" comment="librsvg-2-2-32bit-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140600" comment="rsvg-view-2.40.15-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140597" comment="gdk-pixbuf-loader-rsvg-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140598" comment="librsvg-2-2-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140600" comment="rsvg-view-2.40.15-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141358" comment="gdk-pixbuf-loader-rsvg-2.40.2-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141359" comment="librsvg-2-2-2.40.2-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141360" comment="librsvg-2-2-32bit-2.40.2-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141361" comment="rsvg-view-2.40.2-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144926" comment="librsvg-devel-2.40.2-1.13 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144927" comment="typelib-1_0-Rsvg-2_0-2.40.2-1.13 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145317" comment="librsvg-devel-2.40.15-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145318" comment="typelib-1_0-Rsvg-2_0-2.40.15-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009175785" comment="gdk-pixbuf-loader-rsvg-2.40.20-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175787" comment="librsvg-2-2-2.40.20-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175788" comment="librsvg-2-2-32bit-2.40.20-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175789" comment="rsvg-view-2.40.20-5.6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009175898" comment="librsvg-devel-2.40.20-5.6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009175899" comment="typelib-1_0-Rsvg-2_0-2.40.20-5.6.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1884</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1884" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1884" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1884" ref_url="https://www.suse.com/security/cve/CVE-2013-1884" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-May/000468.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0687-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-04/msg00095.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1869-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-12/msg00055.html" source="SUSE-SU"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-05-20"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1884/">CVE-2013-1884</cve>
	<bugzilla href="https://bugzilla.suse.com/813913">SUSE bug 813913</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009113993" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113994" comment="libsvn_auth_kwallet-1-0-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113995" comment="subversion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113996" comment="subversion-bash-completion-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113997" comment="subversion-devel-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113998" comment="subversion-perl-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009113999" comment="subversion-python-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114001" comment="subversion-server-1.8.10-15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009114002" comment="subversion-tools-1.8.10-15.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009144935" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144936" comment="libsvn_auth_kwallet-1-0-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144937" comment="subversion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144938" comment="subversion-bash-completion-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144939" comment="subversion-devel-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144940" comment="subversion-perl-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144941" comment="subversion-python-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144942" comment="subversion-server-1.8.10-1.25 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144943" comment="subversion-tools-1.8.10-1.25 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145324" comment="libsvn_auth_gnome_keyring-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145326" comment="subversion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145327" comment="subversion-bash-completion-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145328" comment="subversion-devel-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145329" comment="subversion-perl-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145330" comment="subversion-python-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145331" comment="subversion-server-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145332" comment="subversion-tools-1.8.10-24.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009162119" comment="libsvn_auth_gnome_keyring-1-0-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162120" comment="subversion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162121" comment="subversion-bash-completion-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162122" comment="subversion-devel-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162123" comment="subversion-perl-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162124" comment="subversion-python-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162125" comment="subversion-server-1.8.19-25.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009162126" comment="subversion-tools-1.8.19-25.3.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009514186" comment="libsvn_auth_gnome_keyring-1-0-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145325" comment="libsvn_auth_kwallet-1-0-1.8.10-24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514187" comment="subversion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514188" comment="subversion-bash-completion-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514189" comment="subversion-devel-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514190" comment="subversion-perl-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514191" comment="subversion-python-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514192" comment="subversion-server-1.10.6-1.12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514193" comment="subversion-tools-1.10.6-1.12 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1896</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1896" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1896" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1896" ref_url="https://www.suse.com/security/cve/CVE-2013-1896" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:1381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000586.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1824-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000657.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2014:1082-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2014-09/msg00002.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1337-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00026.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1340-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00029.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1341-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-08/msg00030.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2014:1647-1" ref_url="https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html" source="SUSE-SU"/>
    <description>
    mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1896/">CVE-2013-1896</cve>
	<bugzilla href="https://bugzilla.suse.com/829056">SUSE bug 829056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/829057">SUSE bug 829057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144713" comment="apache2-devel-2.4.10-6.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145013" comment="apache2-devel-2.4.16-5.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145199" comment="apache2-devel-2.4.23-14.7 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157606" comment="apache2-devel-2.4.23-28.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513629" comment="apache2-devel-2.4.23-29.24.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513906" comment="apache2-devel-2.4.23-29.43.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140453" comment="apache2-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140454" comment="apache2-doc-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140455" comment="apache2-example-pages-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140456" comment="apache2-prefork-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140457" comment="apache2-utils-2.4.23-14.7 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140458" comment="apache2-worker-2.4.23-14.7 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143124" comment="apache2-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143125" comment="apache2-doc-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143126" comment="apache2-example-pages-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143127" comment="apache2-prefork-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143128" comment="apache2-utils-2.4.10-6.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143129" comment="apache2-worker-2.4.10-6.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009143319" comment="apache2-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143320" comment="apache2-doc-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143321" comment="apache2-example-pages-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143322" comment="apache2-prefork-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143323" comment="apache2-utils-2.4.16-5.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143324" comment="apache2-worker-2.4.16-5.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157598" comment="apache2-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157599" comment="apache2-doc-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157600" comment="apache2-example-pages-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157601" comment="apache2-prefork-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157602" comment="apache2-utils-2.4.23-28.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157603" comment="apache2-worker-2.4.23-28.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512685" comment="apache2-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512686" comment="apache2-doc-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512687" comment="apache2-example-pages-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512688" comment="apache2-prefork-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512689" comment="apache2-utils-2.4.23-29.43.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512690" comment="apache2-worker-2.4.23-29.43.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513471" comment="apache2-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513472" comment="apache2-doc-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513473" comment="apache2-example-pages-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513474" comment="apache2-prefork-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513475" comment="apache2-utils-2.4.23-29.24.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513476" comment="apache2-worker-2.4.23-29.24.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1899</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1899" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1899" ref_url="https://www.suse.com/security/cve/CVE-2013-1899" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0633-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0635-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html" source="SUSE-SU"/>
    <description>
    Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1899/">CVE-2013-1899</cve>
	<bugzilla href="https://bugzilla.suse.com/812525">SUSE bug 812525</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1900</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1900" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1900" ref_url="https://www.suse.com/security/cve/CVE-2013-1900" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0633-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0635-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html" source="SUSE-SU"/>
    <description>
    PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1900/">CVE-2013-1900</cve>
	<bugzilla href="https://bugzilla.suse.com/812525">SUSE bug 812525</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1901</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1901" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1901" ref_url="https://www.suse.com/security/cve/CVE-2013-1901" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0633-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:0633-2" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00022.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0627-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0628-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:0635-1" ref_url="https://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html" source="SUSE-SU"/>
    <description>
    PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Important</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1901/">CVE-2013-1901</cve>
	<bugzilla href="https://bugzilla.suse.com/812525">SUSE bug 812525</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131808" comment="postgresql94-devel-9.4.9-14.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144984" comment="postgresql93-devel-9.3.5-2.3 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009145181" comment="postgresql94-devel-9.4.5-4.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159834" comment="postgresql96-devel-9.6.3-2.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513872" comment="postgresql10-devel-10.5-1.3.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linux Enterprise Software Development Kit 12 SP5 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009514241" comment="postgresql10-devel-10.10-1.15.1 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131141" comment="libpq5-32bit-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009131139" comment="libecpg6-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131140" comment="libpq5-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131142" comment="postgresql94-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131949" comment="postgresql94-contrib-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131950" comment="postgresql94-docs-9.4.9-14.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009131951" comment="postgresql94-server-9.4.9-14.1 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143224" comment="postgresql93-contrib-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143225" comment="postgresql93-docs-9.3.5-2.24 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143226" comment="postgresql93-server-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141505" comment="libecpg6-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141506" comment="libpq5-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141507" comment="libpq5-32bit-9.3.5-2.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141508" comment="postgresql93-9.3.5-2.24 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143358" comment="postgresql94-contrib-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143359" comment="postgresql94-docs-9.4.5-4.5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143360" comment="postgresql94-server-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141965" comment="libecpg6-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141966" comment="libpq5-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141967" comment="libpq5-32bit-9.4.5-4.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141968" comment="postgresql94-9.4.5-4.5 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159133" comment="postgresql96-contrib-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159134" comment="postgresql96-docs-9.6.3-2.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159135" comment="postgresql96-server-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159129" comment="libecpg6-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159130" comment="libpq5-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159131" comment="libpq5-32bit-9.6.3-2.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159132" comment="postgresql96-9.6.3-2.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513532" comment="postgresql10-contrib-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513533" comment="postgresql10-docs-10.5-1.3.2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513534" comment="postgresql10-server-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512304" comment="libecpg6-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512305" comment="libpq5-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512306" comment="libpq5-32bit-10.5-1.3.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512307" comment="postgresql10-10.5-1.3.2 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513086" comment="libecpg6-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513087" comment="libpq5-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513088" comment="libpq5-32bit-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513089" comment="postgresql10-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513090" comment="postgresql10-contrib-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513091" comment="postgresql10-docs-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513092" comment="postgresql10-plperl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513093" comment="postgresql10-plpython-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513094" comment="postgresql10-pltcl-10.10-1.15.1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513095" comment="postgresql10-server-10.10-1.15.1 is installed"/>
			</criteria>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1912</title>
    <affected family="unix">
            <platform>SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1912" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1912" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1912" ref_url="https://www.suse.com/security/cve/CVE-2013-1912" source="SUSE CVE"/>
    <description>
    Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-12-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1912/">CVE-2013-1912</cve>
	<bugzilla href="https://bugzilla.suse.com/830612">SUSE bug 830612</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:suse-sle12-cloud-compute:5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009117479" comment="SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009147478" comment="haproxy-1.5.4-1.10 is installed"/>
		</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1914</title>
    <affected family="unix">
            <platform>SUSE Linux Enterprise Desktop 12</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP1</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP2</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP3</platform>
            <platform>SUSE Linux Enterprise Desktop 12 SP4</platform>
            <platform>SUSE Linux Enterprise High Performance Computing 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server 12</platform>
            <platform>SUSE Linux Enterprise Server 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server 12 SP5</platform>
            <platform>SUSE Linux Enterprise Server for Raspberry Pi 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP1</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP2</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP3</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP4</platform>
            <platform>SUSE Linux Enterprise Server for SAP Applications 12 SP5</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP1</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP2</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP3</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP4</platform>
            <platform>SUSE Linux Enterprise Software Development Kit 12 SP5</platform>
    </affected>
    <reference ref_id="Mitre CVE-2013-1914" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914" source="CVE"/>
    <reference ref_id="SUSE CVE-2013-1914" ref_url="https://www.suse.com/security/cve/CVE-2013-1914" source="SUSE CVE"/>
		<reference ref_id="SUSE-SU-2013:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-June/000477.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-July/000539.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-August/000563.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1852-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000660.html" source="SUSE-SU"/>
		<reference ref_id="SUSE-SU-2013:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2013-December/000661.html" source="SUSE-SU"/>
		<reference ref_id="openSUSE-SU-2013:1510-1" ref_url="https://lists.opensuse.org/opensuse-updates/2013-09/msg00072.html" source="SUSE-SU"/>
    <description>
    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
    </description>
<advisory from="security@suse.de">
	<issued date="2022-05-20"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1914/">CVE-2013-1914</cve>
	<bugzilla href="https://bugzilla.suse.com/813121">SUSE bug 813121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/826666">SUSE bug 826666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/882910">SUSE bug 882910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941444">SUSE bug 941444</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-hpc:12:sp5</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp1</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp2</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp3</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp4</cpe>
		<cpe>cpe:/o:suse:sle-sdk:12:sp5</cpe>
		<cpe>cpe:/o:suse:sled:12</cpe>
		<cpe>cpe:/o:suse:sled:12:sp1</cpe>
		<cpe>cpe:/o:suse:sled:12:sp2</cpe>
		<cpe>cpe:/o:suse:sled:12:sp3</cpe>
		<cpe>cpe:/o:suse:sled:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12</cpe>
		<cpe>cpe:/o:suse:sles:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles:12:sp5</cpe>
		<cpe>cpe:/o:suse:sles_sap:12</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp2</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp3</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp4</cpe>
		<cpe>cpe:/o:suse:sles_sap:12:sp5</cpe>
	</affected_cpe_list>
</advisory>
 </metadata>
	<criteria operator="OR">
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258800" comment="SUSE Linux Enterprise Server for SAP Applications 12 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009117457" comment="SUSE Linux Enterprise Software Development Kit 12 is installed"/>
			</criteria>
				<criterion test_ref="oval:org.opensuse.security:tst:2009144776" comment="glibc-devel-static-2.19-17.72 is installed"/>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140628" comment="glibc-profile-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140619" comment="glibc-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140621" comment="glibc-devel-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140626" comment="glibc-locale-32bit-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009140618" comment="glibc-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140620" comment="glibc-devel-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140622" comment="glibc-html-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140623" comment="glibc-i18ndata-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140625" comment="glibc-locale-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140627" comment="glibc-profile-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140629" comment="nscd-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116183" comment="SUSE Linux Enterprise Desktop 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141386" comment="glibc-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141387" comment="glibc-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141388" comment="glibc-devel-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141389" comment="glibc-devel-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141390" comment="glibc-i18ndata-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141391" comment="glibc-locale-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141392" comment="glibc-locale-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141393" comment="nscd-2.19-17.72 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009116126" comment="SUSE Linux Enterprise Server 12 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141386" comment="glibc-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141387" comment="glibc-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141388" comment="glibc-devel-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141389" comment="glibc-devel-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143193" comment="glibc-html-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141390" comment="glibc-i18ndata-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143194" comment="glibc-info-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141391" comment="glibc-locale-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141392" comment="glibc-locale-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143195" comment="glibc-profile-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143196" comment="glibc-profile-32bit-2.19-17.72 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141393" comment="nscd-2.19-17.72 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141868" comment="glibc-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141869" comment="glibc-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141870" comment="glibc-devel-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141871" comment="glibc-devel-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141872" comment="glibc-i18ndata-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141873" comment="glibc-locale-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141874" comment="glibc-locale-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141875" comment="nscd-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009141868" comment="glibc-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141869" comment="glibc-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141870" comment="glibc-devel-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141871" comment="glibc-devel-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143333" comment="glibc-html-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141872" comment="glibc-i18ndata-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143334" comment="glibc-info-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141873" comment="glibc-locale-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141874" comment="glibc-locale-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143335" comment="glibc-profile-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143336" comment="glibc-profile-32bit-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009141875" comment="nscd-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009118774" comment="SUSE Linux Enterprise Desktop 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118803" comment="SUSE Linux Enterprise Server 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258801" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009118658" comment="SUSE Linux Enterprise Software Development Kit 12 SP1 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145037" comment="glibc-devel-static-2.19-31.9 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009143334" comment="glibc-info-2.19-31.9 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009128016" comment="SUSE Linux Enterprise Desktop 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009128018" comment="SUSE Linux Enterprise Server 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258802" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009135224" comment="SUSE Linux Enterprise Software Development Kit 12 SP2 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009145242" comment="glibc-devel-static-2.22-49.16 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009140624" comment="glibc-info-2.22-49.16 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009156957" comment="glibc-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156958" comment="glibc-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156959" comment="glibc-devel-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156960" comment="glibc-devel-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156986" comment="glibc-html-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156961" comment="glibc-i18ndata-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156962" comment="glibc-locale-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156963" comment="glibc-locale-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156988" comment="glibc-profile-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009157048" comment="glibc-profile-32bit-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156964" comment="nscd-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009159517" comment="SUSE Linux Enterprise Desktop 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009158922" comment="SUSE Linux Enterprise Server 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258803" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009159484" comment="SUSE Linux Enterprise Software Development Kit 12 SP3 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009157042" comment="glibc-devel-static-2.22-61.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009156987" comment="glibc-info-2.22-61.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512152" comment="glibc-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512153" comment="glibc-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512154" comment="glibc-devel-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512155" comment="glibc-devel-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513507" comment="glibc-html-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512156" comment="glibc-i18ndata-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512157" comment="glibc-locale-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512158" comment="glibc-locale-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513509" comment="glibc-profile-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513510" comment="glibc-profile-32bit-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512159" comment="nscd-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009703658" comment="SUSE Linux Enterprise High Performance Computing 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009512877" comment="glibc-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512878" comment="glibc-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512879" comment="glibc-devel-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512880" comment="glibc-devel-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512881" comment="glibc-html-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512882" comment="glibc-i18ndata-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512883" comment="glibc-info-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512884" comment="glibc-locale-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512885" comment="glibc-locale-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512886" comment="glibc-profile-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512887" comment="glibc-profile-32bit-2.22-100.15.4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009512888" comment="nscd-2.22-100.15.4 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009239879" comment="SUSE Linux Enterprise Desktop 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240280" comment="SUSE Linux Enterprise Server 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258804" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009240408" comment="SUSE Linux Enterprise Software Development Kit 12 SP4 is installed"/>
			</criteria>
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009513676" comment="glibc-devel-static-2.22-15.3 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009513508" comment="glibc-info-2.22-15.3 is installed"/>
			</criteria>
		</criteria>
		<criteria operator="AND">
			<criteria operator="OR">
				<criterion test_ref="oval:org.opensuse.security:tst:2009258033" comment="SUSE Linux Enterprise Server 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258806" comment="SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed"/>
				<criterion test_ref="oval:org.opensuse.security:tst:2009258032" comment="SUSE Linu